On 210527 1623, Gerd Hoffmann wrote: > From: Vivek Kasireddy <vivek.kasire...@intel.com> > > Store the meta-data associated with a FB in a new object > (struct virtio_gpu_framebuffer) and pass the object to set_scanout. > Also move code in set_scanout into a do_set_scanout function. > This will be helpful when adding set_scanout_blob API. > > Based-on-patch-by: Gerd Hoffmann <kra...@redhat.com> > Cc: Gerd Hoffmann <kra...@redhat.com> > Signed-off-by: Vivek Kasireddy <vivek.kasire...@intel.com> > Message-Id: <20210526231429.1045476-7-vivek.kasire...@intel.com> > Signed-off-by: Gerd Hoffmann <kra...@redhat.com> > ---
Hi, Recently OSS-Fuzz found a heap-overflow in virtio_gpu_disable_scanout. I bisected it to this patch: https://gitlab.com/qemu-project/qemu/-/issues/383 -Alex