Files
qemu/hw
Mauro Matteo Cascella fa892e9abb ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
Prevent potential integer overflow by limiting 'width' and 'height' to
512x512. Also change 'datasize' type to size_t. Refer to security
advisory https://starlabs.sg/advisories/22-4206/ for more information.

Fixes: CVE-2021-4206
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20220407081712.345609-1-mcascell@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2022-04-07 12:30:54 +02:00
..
2022-04-06 20:03:26 +01:00
2021-10-12 08:20:08 +02:00
2022-04-06 20:03:26 +01:00
2022-02-21 10:18:06 +01:00
2022-03-08 09:18:11 +01:00
2022-03-31 21:30:56 +02:00
2020-08-21 06:30:33 -04:00