diff options
| author | Peter Maydell <peter.maydell@linaro.org> | 2014-09-02 10:26:10 +0100 |
|---|---|---|
| committer | Peter Maydell <peter.maydell@linaro.org> | 2014-09-02 10:26:10 +0100 |
| commit | 30eaca3acdf17d7bcbd1213eb149c02037edfb0b (patch) | |
| tree | b26b2c06f99573046df774ed5926d6710c198734 /hw | |
| parent | 88e89a57f985296a6eeb416b2a875072e09d7faa (diff) | |
| parent | cd56cc6b079f44fbcca3d8a773ae87f7479c6585 (diff) | |
| download | qemu-30eaca3acdf17d7bcbd1213eb149c02037edfb0b.zip qemu-30eaca3acdf17d7bcbd1213eb149c02037edfb0b.tar.gz qemu-30eaca3acdf17d7bcbd1213eb149c02037edfb0b.tar.bz2 | |
Merge remote-tracking branch 'remotes/spice/tags/pull-spice-20140902-1' into staging
sanity check for qxl, minor spice display channel tweak.
# gpg: Signature made Tue 02 Sep 2014 09:53:39 BST using RSA key ID D3E87138
# gpg: Good signature from "Gerd Hoffmann (work) <kraxel@redhat.com>"
# gpg: aka "Gerd Hoffmann <gerd@kraxel.org>"
# gpg: aka "Gerd Hoffmann (private) <kraxel@gmail.com>"
* remotes/spice/tags/pull-spice-20140902-1:
spice: use console index as display id
qxl-render: add more sanity checks
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'hw')
| -rw-r--r-- | hw/display/qxl-render.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/hw/display/qxl-render.c b/hw/display/qxl-render.c index cc2c2b1..bcc5c37 100644 --- a/hw/display/qxl-render.c +++ b/hw/display/qxl-render.c @@ -138,7 +138,9 @@ static void qxl_render_update_area_unlocked(PCIQXLDevice *qxl) if (qemu_spice_rect_is_empty(qxl->dirty+i)) { break; } - if (qxl->dirty[i].left > qxl->dirty[i].right || + if (qxl->dirty[i].left < 0 || + qxl->dirty[i].top < 0 || + qxl->dirty[i].left > qxl->dirty[i].right || qxl->dirty[i].top > qxl->dirty[i].bottom || qxl->dirty[i].right > qxl->guest_primary.surface.width || qxl->dirty[i].bottom > qxl->guest_primary.surface.height) { |