On 2 February 2017 at 15:05, Gerd Hoffmann <kraxel@redhat.com> wrote:
> Hi,
>
> Here is the vga patch queue, finally bringing the cirrus fixes.
>
> Pull v2 fixes the review and message id lines in patch #4.
> No code changes.
>
> please pull,
> Gerd
>
> The following changes since commit a0def594286d9110a6035e02eef558cf3cf5d847:
>
> Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging (2017-01-30 10:23:20 +0000)
>
> are available in the git repository at:
>
>
> git://git.kraxel.org/qemu tags/pull-vga-20170202-2
>
> for you to fetch changes up to 62d4c6bd5263bb8413a06c80144fc678df6dfb64:
>
> cirrus: fix oob access issue (CVE-2017-2615) (2017-02-02 15:58:23 +0100)
>
> ----------------------------------------------------------------
> cirrus: multiple bugfixes, including CVE-2017-2615 fix.
>
> ----------------------------------------------------------------
> Gerd Hoffmann (1):
> cirrus: fix blit address mask handling
>
> Li Qiang (1):
> cirrus: fix oob access issue (CVE-2017-2615)
>
> Wolfgang Bumiller (2):
> cirrus: handle negative pitch in cirrus_invalidate_region()
> cirrus: allow zero source pitch in pattern fill rops
>
> hw/display/cirrus_vga.c | 64 ++++++++++++++++++++++++++++++-------------------
> 1 file changed, 39 insertions(+), 25 deletions(-)
>
Applied, thanks.
-- PMM