On Fri, 10 Jul 2026 at 09:56, Peter Maydell <[email protected]> wrote: > > On Thu, 9 Jul 2026 at 21:35, BALATON Zoltan <[email protected]> wrote: > > > > On Tue, 7 Jul 2026, Peter Maydell wrote: > > > This set of patches fixes three bugs discovered recently in the sm501 > > > device. They're all of the form "guest can misprogram registers in a > > > way that defeats the bounds-checks on the 2D graphics ops". > > > > > > thanks > > > -- PMM > > > > > > Peter Maydell (3): > > > hw/display/sm501: Catch bad coordinates for RTL operations > > > hw/display/sm501: Avoid overflow problems in bounds check calculations > > > hw/display/sm501: Don't allow guest to set ram size larger than it is > > > > > > hw/display/sm501.c | 64 +++++++++++++++++++++++++++++++++++++++------- > > > 1 file changed, 55 insertions(+), 9 deletions(-) > > > > Thank you for fixing these. > > > > Series: > > Tested-by: BALATON Zoltan <[email protected]> > > Reviewed-by: BALATON Zoltan <[email protected]> > > > > I think patch 2 should have: > > "Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3584"; instead > > of work_items/3920. > > Yes, thanks for that catch and for the testing; I cut and pasted > the wrong URL there.
As I'm putting together a target-arm pullreq, I'll take these patches through that, unless somebody from the ppc side would prefer to take them via another route. -- PMM
