Re: [Qemu-devel] [PULL 0/4] cirrus: multiple bugfixes, including CVE-2017-2615 fix.

[Peter Maydell]

On 2 February 2017 at 15:05, Gerd Hoffmann <address@hidden> wrote:
>   Hi,
>
> Here is the vga patch queue, finally bringing the cirrus fixes.
>
> Pull v2 fixes the review and message id lines in patch #4.
> No code changes.
>
> please pull,
>   Gerd
>
> The following changes since commit a0def594286d9110a6035e02eef558cf3cf5d847:
>
>   Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into 
> staging (2017-01-30 10:23:20 +0000)
>
> are available in the git repository at:
>
>
>   git://git.kraxel.org/qemu tags/pull-vga-20170202-2
>
> for you to fetch changes up to 62d4c6bd5263bb8413a06c80144fc678df6dfb64:
>
>   cirrus: fix oob access issue (CVE-2017-2615) (2017-02-02 15:58:23 +0100)
>
> ----------------------------------------------------------------
> cirrus: multiple bugfixes, including CVE-2017-2615 fix.
>
> ----------------------------------------------------------------
> Gerd Hoffmann (1):
>       cirrus: fix blit address mask handling
>
> Li Qiang (1):
>       cirrus: fix oob access issue (CVE-2017-2615)
>
> Wolfgang Bumiller (2):
>       cirrus: handle negative pitch in cirrus_invalidate_region()
>       cirrus: allow zero source pitch in pattern fill rops
>
>  hw/display/cirrus_vga.c | 64 
> ++++++++++++++++++++++++++++++-------------------
>  1 file changed, 39 insertions(+), 25 deletions(-)
>


Applied, thanks.

-- PMM