[Qemu-commits] [qemu/qemu] 167d97: vmsvga: correct bitmap and pixmap size checks

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 167d97a3def77ee2dbf6e908b0ecbfe2103977db
      
https://github.com/qemu/qemu/commit/167d97a3def77ee2dbf6e908b0ecbfe2103977db
  Author: Prasad J Pandit <address@hidden>
  Date:   2016-09-13 (Tue, 13 Sep 2016)

  Changed paths:
    M hw/display/vmware_vga.c

  Log Message:
  -----------
  vmsvga: correct bitmap and pixmap size checks

When processing svga command DEFINE_CURSOR in vmsvga_fifo_run,
the computed BITMAP and PIXMAP size are checked against the
'cursor.mask[]' and 'cursor.image[]' array sizes in bytes.
Correct these checks to avoid OOB memory access.

Reported-by: Qinghao Tang <address@hidden>
Reported-by: Li Qiang <address@hidden>
Signed-off-by: Prasad J Pandit <address@hidden>
Message-id: address@hidden
Signed-off-by: Gerd Hoffmann <address@hidden>


  Commit: 597966d1100ab507382da75d50a798bbb5f79977
      
https://github.com/qemu/qemu/commit/597966d1100ab507382da75d50a798bbb5f79977
  Author: Gerd Hoffmann <address@hidden>
  Date:   2016-09-13 (Tue, 13 Sep 2016)

  Changed paths:
    M hw/display/virtio-gpu-pci.c

  Log Message:
  -----------
  virtio-gpu-pci: tag as not hotpluggable

We can't hotplug display adapters in qemu, tag virtio-gpu-pci
accordingly (virtio-vga already has this).

Signed-off-by: Gerd Hoffmann <address@hidden>
Acked-by: Michael S. Tsirkin <address@hidden>
Message-id: address@hidden


  Commit: c2843e93907a4084e91573994486e810cec248a0
      
https://github.com/qemu/qemu/commit/c2843e93907a4084e91573994486e810cec248a0
  Author: Gerd Hoffmann <address@hidden>
  Date:   2016-09-13 (Tue, 13 Sep 2016)

  Changed paths:
    M hw/display/virtio-vga.c

  Log Message:
  -----------
  virtio-vga: adapt to page-per-vq=off

Signed-off-by: Gerd Hoffmann <address@hidden>
Message-id: address@hidden


  Commit: fa9701240951093907076db0943f96972a396ef5
      
https://github.com/qemu/qemu/commit/fa9701240951093907076db0943f96972a396ef5
  Author: Peter Maydell <address@hidden>
  Date:   2016-09-13 (Tue, 13 Sep 2016)

  Changed paths:
    M hw/display/virtio-gpu-pci.c
    M hw/display/virtio-vga.c
    M hw/display/vmware_vga.c

  Log Message:
  -----------
  Merge remote-tracking branch 'remotes/kraxel/tags/pull-vga-20160913-1' into 
staging

virtio-gpu and vmsvga fixes.

# gpg: Signature made Tue 13 Sep 2016 09:14:44 BST
# gpg:                using RSA key 0x4CB6D8EED3E87138
# gpg: Good signature from "Gerd Hoffmann (work) <address@hidden>"
# gpg:                 aka "Gerd Hoffmann <address@hidden>"
# gpg:                 aka "Gerd Hoffmann (private) <address@hidden>"
# Primary key fingerprint: A032 8CFF B93A 17A7 9901  FE7D 4CB6 D8EE D3E8 7138

* remotes/kraxel/tags/pull-vga-20160913-1:
  virtio-vga: adapt to page-per-vq=off
  virtio-gpu-pci: tag as not hotpluggable
  vmsvga: correct bitmap and pixmap size checks

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/e1c270c9404e...fa9701240951