mbox

[PULL,0/4] cirrus: multiple bugfixes, including CVE-2017-2615 fix.

Message ID 1486023789-28995-1-git-send-email-kraxel@redhat.com
State New
Headers show

Pull-request

git://git.kraxel.org/qemu tags/pull-vga-20170202-1

Message

Gerd Hoffmann Feb. 2, 2017, 8:23 a.m. UTC 
Hi,

Here is the vga patch queue, finally bringing the cirrus fixes.

please pull,
  Gerd

The following changes since commit a0def594286d9110a6035e02eef558cf3cf5d847:

  Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging (2017-01-30 10:23:20 +0000)

are available in the git repository at:


  git://git.kraxel.org/qemu tags/pull-vga-20170202-1

for you to fetch changes up to 31b1a6bb0f8ead5c0b21f23daf3054e3ccbc215e:

  cirrus: fix oob access issue (CVE-2017-2615) (2017-02-01 14:43:10 +0100)

----------------------------------------------------------------
cirrus: multiple bugfixes, including CVE-2017-2615 fix.

----------------------------------------------------------------
Gerd Hoffmann (1):
      cirrus: fix blit address mask handling

Li Qiang (1):
      cirrus: fix oob access issue (CVE-2017-2615)

Wolfgang Bumiller (2):
      cirrus: handle negative pitch in cirrus_invalidate_region()
      cirrus: allow zero source pitch in pattern fill rops

 hw/display/cirrus_vga.c | 64 ++++++++++++++++++++++++++++++-------------------
 1 file changed, 39 insertions(+), 25 deletions(-)

Comments

Gerd Hoffmann Feb. 2, 2017, 3 p.m. UTC | #1 
On Do, 2017-02-02 at 09:23 +0100, Gerd Hoffmann wrote:
>   Hi,
> 
> Here is the vga patch queue, finally bringing the cirrus fixes.

self-nack, v2 coming ...

cheers,
  Gerd