Re: [Qemu-devel] [PATCH v2 1/5] vmware-vga: CVE-2014-3689: turn off hw accel

2014-10-16 Thread Don Koch
On Wed, 15 Oct 2014 12:10:35 +0200 Gerd Hoffmann wrote: > Quick & easy stopgap for CVE-2014-3689: We just compile out the > hardware acceleration functions which lack sanity checks. Thankfully > we have capability bits for them (SVGA_CAP_RECT_COPY and > SVGA_CAP_RECT_FILL), so guests should dea

[Qemu-devel] [PATCH v2 1/5] vmware-vga: CVE-2014-3689: turn off hw accel

2014-10-15 Thread Gerd Hoffmann
Quick & easy stopgap for CVE-2014-3689: We just compile out the hardware acceleration functions which lack sanity checks. Thankfully we have capability bits for them (SVGA_CAP_RECT_COPY and SVGA_CAP_RECT_FILL), so guests should deal just fine, in theory. Subsequent patches will add the missing c