On 2 February 2017 at 15:05, Gerd Hoffmann <kra...@redhat.com> wrote: > Hi, > > Here is the vga patch queue, finally bringing the cirrus fixes. > > Pull v2 fixes the review and message id lines in patch #4. > No code changes. > > please pull, > Gerd > > The following changes since commit a0def594286d9110a6035e02eef558cf3cf5d847: > > Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into > staging (2017-01-30 10:23:20 +0000) > > are available in the git repository at: > > > git://git.kraxel.org/qemu tags/pull-vga-20170202-2 > > for you to fetch changes up to 62d4c6bd5263bb8413a06c80144fc678df6dfb64: > > cirrus: fix oob access issue (CVE-2017-2615) (2017-02-02 15:58:23 +0100) > > ---------------------------------------------------------------- > cirrus: multiple bugfixes, including CVE-2017-2615 fix. > > ---------------------------------------------------------------- > Gerd Hoffmann (1): > cirrus: fix blit address mask handling > > Li Qiang (1): > cirrus: fix oob access issue (CVE-2017-2615) > > Wolfgang Bumiller (2): > cirrus: handle negative pitch in cirrus_invalidate_region() > cirrus: allow zero source pitch in pattern fill rops > > hw/display/cirrus_vga.c | 64 > ++++++++++++++++++++++++++++++------------------- > 1 file changed, 39 insertions(+), 25 deletions(-) >
Applied, thanks. -- PMM
