| commit | ca1f9cbfdce4d63b10d57de80fef89a89d92a540 | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Wed, 21 Oct 2020 10:38:18 +0000 (21 16:08 +0530) | ||
| committer | Gerd Hoffmann <kraxel@redhat.com> | |
| Wed, 4 Nov 2020 07:25:17 +0000 (4 08:25 +0100) | ||
| tree | f31d58ba6405f3958a29ab295ad15b0d78b3a7d8 | treesnapshot (tar.gz zip) |
| parent | 2ddafce7f797082ad216657c830afd4546f16e37 | commitdiff |
ati: check x y display parameter values
The source and destination x,y display parameters in ati_2d_blt()
may run off the vga limits if either of s->regs.[src|dst]_[xy] is
zero. Check the parameter values to avoid potential crash.
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20201021103818.1704030-1-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
The source and destination x,y display parameters in ati_2d_blt()
may run off the vga limits if either of s->regs.[src|dst]_[xy] is
zero. Check the parameter values to avoid potential crash.
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20201021103818.1704030-1-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
| hw/display/ati_2d.c | diffblobblamehistory |