diff options
| author | aurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162> | 2008-11-01 00:53:39 +0000 |
|---|---|---|
| committer | aurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162> | 2008-11-01 00:53:39 +0000 |
| commit | 65d35a09979e63541afc5bfc595b9f1b1b4ae069 (patch) | |
| tree | 5098bbe7aae32fcc729cb89a77ed75a1f9773045 /slirp/tcp_timer.h | |
| parent | 6d17c604c0fb35dd7d02b60dd99ce882264e68e5 (diff) | |
CVE-2008-4539: fix a heap overflow in Cirrus emulation
The code in hw/cirrus_vga.c has changed a lot between CVE-2007-1320 has
been announced and the patch has been applied. As a consequence it has
wrongly applied and QEMU is still vulnerable to this bug if using VNC.
(noticed by Jan Niehusmann)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@5587 c046a42c-6fe2-441c-8c8c-71466251a162
Diffstat (limited to 'slirp/tcp_timer.h')
0 files changed, 0 insertions, 0 deletions