Files
qemu/ui
Mauro Matteo Cascella fa892e9abb ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
Prevent potential integer overflow by limiting 'width' and 'height' to
512x512. Also change 'datasize' type to size_t. Refer to security
advisory https://starlabs.sg/advisories/22-4206/ for more information.

Fixes: CVE-2021-4206
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20220407081712.345609-1-mcascell@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2022-04-07 12:30:54 +02:00
..
2020-09-30 19:09:19 +02:00
2019-03-11 08:39:02 +01:00
2021-12-21 10:50:22 +04:00
2021-12-21 10:50:22 +04:00
2022-03-15 12:54:55 +04:00
2019-08-16 13:31:52 +02:00
2020-12-10 12:15:18 -05:00
2022-03-14 15:16:16 +04:00
2021-12-21 10:50:22 +04:00
2017-07-27 14:23:09 +02:00
2016-02-04 17:01:04 +00:00
2019-02-05 16:50:18 +01:00
2021-01-23 15:55:07 -05:00
2021-05-21 09:42:44 +02:00