diff options
| author | Juergen Lock <nox@FreeBSD.org> | 2008-11-02 22:59:10 +0000 |
|---|---|---|
| committer | Juergen Lock <nox@FreeBSD.org> | 2008-11-02 22:59:10 +0000 |
| commit | 6bc005ce5945dd2ba664d07fef62ec9108649eee (patch) | |
| tree | bdb6b8c354826a397a1598e9d5906b1b585dff7f /emulators/qemu/files | |
| parent | f51226346915b698429c5b2e4ad3d4d4e17bc6ac (diff) | |
| download | ports-6bc005ce5945dd2ba664d07fef62ec9108649eee.tar.gz ports-6bc005ce5945dd2ba664d07fef62ec9108649eee.zip | |
Notes
Diffstat (limited to 'emulators/qemu/files')
| -rw-r--r-- | emulators/qemu/files/patch-CVE-2008-4539 | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/emulators/qemu/files/patch-CVE-2008-4539 b/emulators/qemu/files/patch-CVE-2008-4539 new file mode 100644 index 000000000000..c2348bd4cf91 --- /dev/null +++ b/emulators/qemu/files/patch-CVE-2008-4539 @@ -0,0 +1,27 @@ +Index: qemu/hw/cirrus_vga.c +=================================================================== +--- trunk/hw/cirrus_vga.c 2008-11-01 00:53:30 UTC (rev 5586) ++++ trunk/hw/cirrus_vga.c 2008-11-01 00:53:39 UTC (rev 5587) +@@ -785,15 +785,14 @@ + + static int cirrus_bitblt_videotovideo_copy(CirrusVGAState * s) + { ++ if (BLTUNSAFE(s)) ++ return 0; ++ + if (s->ds->dpy_copy) { + cirrus_do_copy(s, s->cirrus_blt_dstaddr - s->start_addr, + s->cirrus_blt_srcaddr - s->start_addr, + s->cirrus_blt_width, s->cirrus_blt_height); + } else { +- +- if (BLTUNSAFE(s)) +- return 0; +- + (*s->cirrus_rop) (s, s->vram_ptr + + (s->cirrus_blt_dstaddr & s->cirrus_addr_mask), + s->vram_ptr + + + + + |