Gerd Hoffmann c2e3c54d39 vmsvga: add more fifo checks ...

Make sure all fifo ptrs are within range.

Fixes: CVE-2016-4454
Cc: qemu-stable@nongnu.org
Cc: P J P <ppandit@redhat.com>
Reported-by: 李强 <liqiang6-s@360.cn>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-id: 1464592161-18348-3-git-send-email-kraxel@redhat.com

2016-06-06 09:04:19 +02:00

..

9pfs

…

acpi

…

alpha

…

arm

Add ENET device to i.MX6 SOC.

2016-06-02 10:42:46 +08:00

audio

…

block

…

bt

bt: rewrite csrhci_write to avoid out-of-bounds writes

2016-05-29 09:11:11 +02:00

char

hw/char: QOM'ify milkymist-uart.c

2016-05-29 09:11:10 +02:00

core

…

cpu

…

cris

hw/char: QOM'ify etraxfs_ser.c

2016-05-29 09:11:10 +02:00

display

vmsvga: add more fifo checks

2016-06-06 09:04:19 +02:00

dma

…

gpio

…

i2c

…

i386

…

ide

…

input

…

intc

…

ipack

…

ipmi

…

isa

…

lm32

hw/char: QOM'ify milkymist-uart.c

2016-05-29 09:11:10 +02:00

m68k

…

mem

…

microblaze

…

mips

…

misc

memory: remove qemu_get_ram_fd, qemu_set_ram_fd, qemu_ram_block_host_ptr

2016-05-29 09:11:12 +02:00

moxie

…

net

-----BEGIN PGP SIGNATURE-----

2016-06-02 14:26:57 +01:00

nvram

…

openrisc

…

pci

pcie: Introduce function for DSN capability creation

2016-06-02 10:42:26 +08:00

pci-bridge

…

pci-host

…

pcmcia

…

ppc

ppc: Do some batching of TCG tlb flushes

2016-05-30 13:20:04 +10:00

s390x

…

scsi

scsi-generic: Merge block max xfer len in INQUIRY response

2016-05-29 09:11:12 +02:00

sd

…

sh4

…

smbios

…

sparc

…

sparc64

…

ssi

…

timer

…

tpm

…

tricore

…

unicore32

…

usb

…

vfio

vfio: Check that IOMMU MR translates to system address space

2016-05-26 11:12:09 -06:00

virtio

memory: split memory_region_from_host from qemu_ram_addr_from_host

2016-05-29 09:11:12 +02:00

watchdog

…

xen

…

xenpv

…

xtensa

…

Makefile.objs

…