ShuriZma
/
xemu
mirror of https://github.com/xemu-project/xemu.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

qxl: add sanity check 

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
This commit is contained in:
Gerd Hoffmann 2014-02-19 11:40:17 +01:00
parent 105a060188
commit 9c70434f82
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hw/display/qxl.c
View File

@ -1429,7 +1429,7 @@ static int qxl_destroy_primary(PCIQXLDevice *d, qxl_async_io async)
return 1; return 1;
} }
static void qxl_set_mode(PCIQXLDevice *d, int modenr, int loadvm) static void qxl_set_mode(PCIQXLDevice *d, unsigned int modenr, int loadvm)
{ {
pcibus_t start = d->pci.io_regions[QXL_RAM_RANGE_INDEX].addr; pcibus_t start = d->pci.io_regions[QXL_RAM_RANGE_INDEX].addr;
pcibus_t end = d->pci.io_regions[QXL_RAM_RANGE_INDEX].size + start; pcibus_t end = d->pci.io_regions[QXL_RAM_RANGE_INDEX].size + start;
@ -1439,6 +1439,12 @@ static void qxl_set_mode(PCIQXLDevice *d, int modenr, int loadvm)
.mem_start = start, .mem_start = start,
.mem_end = end .mem_end = end
}; };
if (modenr >= d->modes->n_modes) {
qxl_set_guest_bug(d, "mode number out of range");
return;
}
QXLSurfaceCreate surface = { QXLSurfaceCreate surface = {
.width = mode->x_res, .width = mode->x_res,
.height = mode->y_res, .height = mode->y_res,