Re: [PATCH] ati-vga: Fix checks in ati_2d_blt() to avoid crash

2020-08-24 Thread P J P
+-- On Sat, 22 Aug 2020, Philippe Mathieu-Daudé wrote --+ | This points to a BZ#1847385 which is private: | "You are not authorized to access bug #1847385. | https://bugzilla.redhat.com/show_bug.cgi?id=1847385 CVE-2020-24352: -> https://bugzilla.redhat.com/show_bug.cgi?id=1847584 This is the

Re: [PATCH] ati-vga: Fix checks in ati_2d_blt() to avoid crash

2020-08-24 Thread Michael Tokarev
22.08.2020 15:31, Philippe Mathieu-Daudé пишет: > On 4/6/20 10:34 PM, BALATON Zoltan wrote: >> In some corner cases (that never happen during normal operation but a >> malicious guest could program wrong values) pixman functions were >> called with parameters that result in a crash. Fix this and

Re: [PATCH] ati-vga: Fix checks in ati_2d_blt() to avoid crash

2020-08-22 Thread BALATON Zoltan via
On Sat, 22 Aug 2020, Philippe Mathieu-Daudé wrote: On 4/6/20 10:34 PM, BALATON Zoltan wrote: In some corner cases (that never happen during normal operation but a malicious guest could program wrong values) pixman functions were called with parameters that result in a crash. Fix this and add

Re: [PATCH] ati-vga: Fix checks in ati_2d_blt() to avoid crash

2020-08-22 Thread Philippe Mathieu-Daudé
On 4/6/20 10:34 PM, BALATON Zoltan wrote: > In some corner cases (that never happen during normal operation but a > malicious guest could program wrong values) pixman functions were > called with parameters that result in a crash. Fix this and add more > checks to disallow such cases. (Fair)

[PATCH] ati-vga: Fix checks in ati_2d_blt() to avoid crash

2020-04-06 Thread BALATON Zoltan
In some corner cases (that never happen during normal operation but a malicious guest could program wrong values) pixman functions were called with parameters that result in a crash. Fix this and add more checks to disallow such cases. Reported-by: Ziming Zhang Signed-off-by: BALATON Zoltan ---