mbox

[PULL,for-2.2,0/2] cirrus: fix blit region check (cve-2014-8106)

Message ID 1417695221-27409-1-git-send-email-kraxel@redhat.com
State New
Headers show

Pull-request

git://git.kraxel.org/qemu tags/pull-cve-2014-8106-20141204-1

Message

Gerd Hoffmann Dec. 4, 2014, 12:13 p.m. UTC
Hi,

Last minute pull req for 2.2, carrying a security
fix for cirrus bitblit ops.

please pull,
  Gerd

The following changes since commit db12451decf7dfe0f083564183e135f2095228b9:

  Fix for crash after migration in virtio-rng on bi-endian targets (2014-11-28 13:06:00 +0000)

are available in the git repository at:

  git://git.kraxel.org/qemu tags/pull-cve-2014-8106-20141204-1

for you to fetch changes up to bf25983345ca44aec3dd92c57142be45452bd38a:

  cirrus: don't overflow CirrusVGAState->cirrus_bltbuf (2014-12-01 10:25:46 +0100)

----------------------------------------------------------------
cirrus: fix blit region check

----------------------------------------------------------------
Gerd Hoffmann (2):
      cirrus: fix blit region check
      cirrus: don't overflow CirrusVGAState->cirrus_bltbuf

 hw/display/cirrus_vga.c | 65 ++++++++++++++++++++++++++++++++++++-------------
 1 file changed, 48 insertions(+), 17 deletions(-)

Comments

Peter Maydell Dec. 4, 2014, 1:15 p.m. UTC | #1
On 4 December 2014 at 12:13, Gerd Hoffmann <kraxel@redhat.com> wrote:
>   Hi,
>
> Last minute pull req for 2.2, carrying a security
> fix for cirrus bitblit ops.

Applied, thanks. We'll need to do an rc5 now; is there
anything else in the pipeline?

thanks
-- PMM