[Qemu-devel] [PULL 0/5] vmware-vga: add rectangle verification (CVE-2014-3689)

[Gerd Hoffmann]

  Hi,

After three revisions now finally the
pull req for the CVE-2014-3689 fixes.

please pull,
  Gerd

The following changes since commit 3e9418e160cd8901c83a3c88967158084f5b5c03:

  Revert "main-loop.c: Handle SIGINT, SIGHUP and SIGTERM synchronously" 
(2014-10-27 15:05:09 +0000)

are available in the git repository at:

  git://git.kraxel.org/qemu tags/pull-cve-2014-3689-20141029-1

for you to fetch changes up to bd9ccd8517e83b7c33a9167815dbfffb30d70b13:

  vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect (2014-10-29 12:01:30 
+0100)

----------------------------------------------------------------
vmware-vga: add rectangle verification (CVE-2014-3689)

----------------------------------------------------------------
Gerd Hoffmann (5):
      vmware-vga: CVE-2014-3689: turn off hw accel
      vmware-vga: add vmsvga_verify_rect
      vmware-vga: use vmsvga_verify_rect in vmsvga_update_rect
      vmware-vga: use vmsvga_verify_rect in vmsvga_copy_rect
      vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect

 hw/display/vmware_vga.c | 116 ++++++++++++++++++++++++++++++++----------------
 1 file changed, 78 insertions(+), 38 deletions(-)