Gerd Hoffmann d59d37dea4 vmsvga: don't process more than 1024 fifo commands at once ...

vmsvga_fifo_run is called in regular intervals (on each display update)
and will resume where it left off.  So we can simply exit the loop,
without having to worry about how processing will continue.

Fixes: CVE-2016-4453
Cc: qemu-stable@nongnu.org
Cc: P J P <ppandit@redhat.com>
Reported-by: 李强 <liqiang6-s@360.cn>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-id: 1464592161-18348-5-git-send-email-kraxel@redhat.com
(cherry picked from commit 4e68a0ee17dad7b8d870df0081d4ab2e079016c2)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>

2016-08-05 13:37:49 -05:00

..

ads7846.c

…

bcm2835_fb.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

blizzard_template.h

…

blizzard.c

…

cg3.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

cirrus_vga_rop2.h

…

cirrus_vga_rop.h

…

cirrus_vga.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

exynos4210_fimd.c

…

framebuffer.c

…

framebuffer.h

…

g364fb.c

…

jazz_led.c

…

Makefile.objs

bcm2835_fb: add framebuffer device for Raspberry Pi

2016-03-16 17:42:18 +00:00

milkymist-tmu2.c

…

milkymist-vgafb_template.h

…

milkymist-vgafb.c

…

omap_dss.c

…

omap_lcd_template.h

…

omap_lcdc.c

…

pl110_template.h

…

pl110.c

…

pxa2xx_lcd.c

…

pxa2xx_template.h

…

qxl-logger.c

…

qxl-render.c

…

qxl.c

…

qxl.h

…

sm501_template.h

…

sm501.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

ssd0303.c

…

ssd0323.c

…

tc6393xb_template.h

…

tc6393xb.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

tcx.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

vga_int.h

vga: add sr_vbe register set

2016-08-04 16:46:46 -05:00

vga-helpers.h

…

vga-isa-mm.c

…

vga-isa.c

…

vga-pci.c

…

vga.c

vga: add sr_vbe register set

2016-08-04 16:46:46 -05:00

vga.h

…

virtio-gpu-3d.c

…

virtio-gpu-pci.c

…

virtio-gpu.c

virtio-gpu: block live migration

2016-04-11 12:36:34 +02:00

virtio-vga.c

…

vmware_vga.c

vmsvga: don't process more than 1024 fifo commands at once

2016-08-05 13:37:49 -05:00

xenfb.c

xenfb: use the correct condition to avoid excessive looping

2016-04-12 10:16:08 -07:00