On Do, 2016-09-08 at 18:15 +0530, P J P wrote: > From: Prasad J Pandit <p...@fedoraproject.org> > > When processing svga command DEFINE_CURSOR in vmsvga_fifo_run, > the computed BITMAP and PIXMAP size are checked against the > 'cursor.mask[]' and 'cursor.image[]' array sizes in bytes. > Correct these checks to avoid OOB memory access.
Added to vga patch queue. thanks, Gerd
