31905d81fa
xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xen-4.6.0-testing-src.tar.bz2 xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=399
26 lines
1.1 KiB
Diff
26 lines
1.1 KiB
Diff
References: bsc#958493 CVE-2015-8504
|
|
|
|
Index: xen-4.6.1-testing/tools/qemu-xen-traditional-dir-remote/vnc.c
|
|
===================================================================
|
|
--- xen-4.6.1-testing.orig/tools/qemu-xen-traditional-dir-remote/vnc.c
|
|
+++ xen-4.6.1-testing/tools/qemu-xen-traditional-dir-remote/vnc.c
|
|
@@ -1644,15 +1644,15 @@ static void set_pixel_format(VncState *v
|
|
}
|
|
|
|
vs->clientds = vs->serverds;
|
|
- vs->clientds.pf.rmax = red_max;
|
|
+ vs->clientds.pf.rmax = red_max ? red_max : 0xFF;
|
|
count_bits(vs->clientds.pf.rbits, red_max);
|
|
vs->clientds.pf.rshift = red_shift;
|
|
vs->clientds.pf.rmask = red_max << red_shift;
|
|
- vs->clientds.pf.gmax = green_max;
|
|
+ vs->clientds.pf.gmax = green_max ? green_max : 0xFF;
|
|
count_bits(vs->clientds.pf.gbits, green_max);
|
|
vs->clientds.pf.gshift = green_shift;
|
|
vs->clientds.pf.gmask = green_max << green_shift;
|
|
- vs->clientds.pf.bmax = blue_max;
|
|
+ vs->clientds.pf.bmax = blue_max ? blue_max : 0xFF;
|
|
count_bits(vs->clientds.pf.bbits, blue_max);
|
|
vs->clientds.pf.bshift = blue_shift;
|
|
vs->clientds.pf.bmask = blue_max << blue_shift;
|