mirror of
https://github.com/qemu/qemu.git
synced 2025-10-18 17:44:16 +00:00
![]() If the guest trigger following sequences, the attach_backing will be leaked:
vg_resource_create_2d
vg_resource_attach_backing
vg_resource_unref
This patch fix this by freeing 'res->iov' in vg_resource_destroy.
Fixes: CVE-2021-3544
Reported-by: Li Qiang <liq3ea@163.com>
virtio-gpu fix:
|
||
---|---|---|
.. | ||
50-qemu-gpu.json.in | ||
meson.build | ||
vhost-user-gpu.c | ||
virgl.c | ||
virgl.h | ||
vugbm.c | ||
vugbm.h | ||
vugpu.h |