SYS-OSS/FRET-qemu
4
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
FRET-qemu/hw
History
Peter Maydell 4239e2dc01 vmware-vga: add rectangle verification (CVE-2014-3689) 
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 
 iQIcBAABAgAGBQJUUNNZAAoJEEy22O7T6HE4S3YP/jEHyGtodT6+Q2sTOFWX7y4q
 q4JP+xRONdLnY//7Xe8F2cZQffH0W5QS8DJxf4SaRVDVk2e2tvK2P9XiaMkekOEC
 zzfKxbvGozD4w2yrhVNAlQb4l1c09jcBuoa4T3JEXwdH28sq9TuOmGLNky7oEG2W
 nVEXcO14yMDHKCurbZuzvwxoc25XwY8Y2vTW558iLvGzFzXLMt3fIp2MIIcmQL1c
 lWQ2+6Ajeh2KzjpiWFym6fvMko3rM+IpdhYLNQE7PbbzsD9SynwWxnC3P6xSuSv9
 WFMz1RWcoDOylosnXmjQgZFgpgwl2jnfX4MWDclWO3z0ooGgchKnR4b1eWyefV6b
 oFsG8Pl2duESYRyojhnglXoTqQnT/lf0j+MoeVWkMSADSYgKoGYIVwNtdFM4LXY2
 0hlnuJl4uKbdCGmi1UWZ517h4sU1cdf4NuaQDLjkr2p4GREvGsUvww7ae++cxJtL
 xiqnheJOjrg6qM+P+N6x9Iqd3ChcsFF3xu5nKH/iO4nXgdsiL4sBqA0iUsVvujXV
 AQZyxBka81sXEdZBH1nOFuTj14TaStl8OCLWz2iOQj4fqAaMoibDeoSVUXnzo3CI
 HZ4fGnJ9j17qOJAv5VL8XnUOp8ZFGFpTFkVHhuZkqZyaMlP1t0ujpP/cUXrS1+Hm
 yabN/p6vO063JE23JN9W
 =Z1KH
 -----END PGP SIGNATURE-----

Merge remote-tracking branch 'remotes/kraxel/tags/pull-cve-2014-3689-20141029-1' into staging

vmware-vga: add rectangle verification (CVE-2014-3689)

# gpg: Signature made Wed 29 Oct 2014 11:45:29 GMT using RSA key ID D3E87138
# gpg: Good signature from "Gerd Hoffmann (work) <kraxel@redhat.com>"
# gpg:                 aka "Gerd Hoffmann <gerd@kraxel.org>"
# gpg:                 aka "Gerd Hoffmann (private) <kraxel@gmail.com>"

* remotes/kraxel/tags/pull-cve-2014-3689-20141029-1:
  vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect
  vmware-vga: use vmsvga_verify_rect in vmsvga_copy_rect
  vmware-vga: use vmsvga_verify_rect in vmsvga_update_rect
  vmware-vga: add vmsvga_verify_rect
  vmware-vga: CVE-2014-3689: turn off hw accel

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2014-10-30 19:11:25 +00:00
..
9pfs
hw/9pfs: Don't return type from host in readdir on local 9p filesystem
2014-09-04 10:51:13 -05:00
acpi
qdev: HotplugHandler: Rename unplug callback to unplug_request
2014-10-15 05:03:13 +02:00
alpha
ide: Update ide_drive_get to be HBA agnostic
2014-10-03 10:30:33 +01:00
arm
arm/virt: enable PSCI emulation support for system emulation
2014-10-24 12:19:13 +01:00
audio
ac97: register reset via qom
2014-09-29 10:20:05 +02:00
block
blockdev: Fix blockdev-add not to create DriveInfo
2014-10-20 14:03:50 +02:00
bt
l2cap: fix access to freed memory
2014-08-15 19:12:48 +04:00
char
virtio-serial: Convert to hotplug-handler API
2014-10-15 05:03:13 +02:00
core
virtio-scsi fixes, the first part of dynamic sysbus devices,
2014-10-30 13:35:12 +00:00
cpu
target-i386: ICC bus: Drop BusState::allow_hotplug
2014-10-15 05:03:13 +02:00
cris
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
display
vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect
2014-10-29 12:01:30 +01:00
dma
hw/dma/i8257: Silence phony error message
2014-09-16 12:35:02 +02:00
gpio
pl061: implement input interrupt logic
2014-09-12 14:06:48 +01:00
i2c
Fix debug print warning
2014-09-02 22:38:16 +04:00
i386
Block patches
2014-10-22 16:39:49 +01:00
ide
hmp: Remove "info pcmcia"
2014-10-24 12:19:11 +01:00
input
hw/input/tsc210x.c: Delete unused array tsc2101_rates
2014-09-29 18:48:48 +01:00
intc
arm_gic: remove unused parameter.
2014-10-24 12:19:11 +01:00
ipack
memory: remove memory_region_destroy
2014-08-18 12:06:21 +02:00
isa
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
lm32
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
m68k
memory: add parameter errp to memory_region_init_ram
2014-09-09 13:41:43 +02:00
mem
pc-dimm: Don't check dimm->node when there is non-NUMA config
2014-09-29 19:44:04 +03:00
microblaze
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
mips
Block patches
2014-10-22 16:39:49 +01:00
misc
omap_gpmc.c: Remove duplicate assignment
2014-10-24 12:19:12 +01:00
moxie
memory: add parameter errp to memory_region_init_ram
2014-09-09 13:41:43 +02:00
net
bootindex: move calling add_boot_device_patch to bootindex setter function
2014-10-15 10:46:01 +02:00
nvram
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
openrisc
memory: add parameter errp to memory_region_init_ram
2014-09-09 13:41:43 +02:00
pci
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
pci-bridge
qdev: HotplugHandler: Rename unplug callback to unplug_request
2014-10-15 05:03:13 +02:00
pci-host
- Memory: improve error reporting and avoid crashes on hotplug
2014-09-12 16:55:49 +01:00
pcmcia
hmp: Remove "info pcmcia"
2014-10-24 12:19:11 +01:00
ppc
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
s390x
virtio: link the rng backend through an alias property
2014-10-30 12:59:27 +00:00
scsi
hw/scsi/virtio-scsi.c: fix the "type" use error in virtio_scsi_handle_ctrl
2014-10-27 16:11:45 +01:00
sd
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
sh4
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
sparc
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
sparc64
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
ssi
ssi: xilinx_spi: Initialise CS GPIOs as NULL
2014-08-15 18:54:40 +04:00
timer
mc146818rtc: add missed field to vmstate
2014-09-11 12:20:32 +02:00
tpm
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
tricore
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
unicore32
memory: add parameter errp to memory_region_init_ram
2014-09-09 13:41:43 +02:00
usb
uhci: remove useless DEBUG
2014-10-28 11:38:18 +01:00
virtio
virtio: link the rng backend through an alias property
2014-10-30 12:59:27 +00:00
watchdog
memory: remove memory_region_destroy
2014-08-18 12:06:21 +02:00
xen
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
xenpv
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
xtensa
hw: Convert from BlockDriverState to BlockBackend, mostly
2014-10-20 14:02:25 +02:00
Makefile.objs
pc: implement pc-dimm device abstraction
2014-06-19 16:41:47 +03:00