Re: [Qemu-devel] [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)

2017-02-01 Thread Laszlo Ersek
On 02/01/17 09:35, Gerd Hoffmann wrote: > From: Li Qiang > > When doing bitblt copy in backward mode, we should minus the > blt width first just like the adding in the forward mode. This > can avoid the oob access of the front of vga's vram. > > Signed-off-by: Li Qiang > Message-id: 5887254f.86

[Qemu-devel] [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)

2017-02-01 Thread Gerd Hoffmann
From: Li Qiang When doing bitblt copy in backward mode, we should minus the blt width first just like the adding in the forward mode. This can avoid the oob access of the front of vga's vram. Signed-off-by: Li Qiang Message-id: 5887254f.863a240a.2c122.5...@mx.google.com { kraxel: with backward