Commit 819c83e2 authored by Gerd Hoffmann's avatar Gerd Hoffmann
Browse files

ramfb: add sanity checks to ramfb_create_display_surface 



Signed-off-by: default avatarGerd Hoffmann <kraxel@redhat.com>
Reviewed-by: default avatarLaszlo Ersek <lersek@redhat.com>
Message-id: 20200429115236.28709-6-kraxel@redhat.com
parent 19aaee2a

hw/display/ramfb.c

+6 −0
Original line number Diff line number Diff line
@@ -15,6 +15,7 @@ 
#include "qapi/error.h"

#include "hw/loader.h"

#include "hw/display/ramfb.h"

#include "hw/display/bochs-vbe.h" /* for limits */

#include "ui/console.h"

#include "sysemu/reset.h"
@@ -49,6 +50,11 @@ static DisplaySurface *ramfb_create_display_surface(int width, int height, 
    hwaddr size;

    void *data;



    if (width < 16 || width > VBE_DISPI_MAX_XRES ||

        height < 16 || height > VBE_DISPI_MAX_YRES ||

        format == 0 /* unknown format */)

        return NULL;



    if (linesize == 0) {

        linesize = width * PIXMAN_FORMAT_BPP(format) / 8;

    }