Benjamin Herrenschmidt d16136d22a cirrus: Fix host CPU blits ... Commit b2eb849d4b "CVE-2007-1320 - Cirrus LGD-54XX "bitblt" heap overflow" broke cpu to video blits. When the ROP function is called from cirrus_bitblt_cputovideo_next(), we pass 0 for the pitch but only operate on one line at a time. The added test was tripping because after the initial substraction, the pitch becomes negative. Make the test only trip when the height is larger than one (ie. the pitch is actually used). This fixes HW cursor support in Windows NT4.0 (which otherwise was a white rectangle) and general display of icons in that OS when using 8bpp mode. Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>		2014-07-11 10:17:02 +02:00
..
ads7846.c	savevm: Remove all the unneeded version_minimum_id_old (arm)	2014-05-13 16:09:35 +01:00
blizzard_template.h	display: avoid multi-statement macro	2014-01-31 14:47:33 +00:00
blizzard.c	console: add head to index to qemu consoles.	2014-03-05 09:52:04 +01:00
cg3.c	cg3: add extra check to prevent CG3 register array overflow	2014-06-05 20:51:30 +01:00
cirrus_vga_rop2.h
cirrus_vga_rop.h	cirrus: Fix host CPU blits	2014-07-11 10:17:02 +02:00
cirrus_vga_template.h
cirrus_vga.c	cirrus: Fix build of debug code	2014-07-11 10:17:01 +02:00
exynos4210_fimd.c	savevm: Remove all the unneeded version_minimum_id_old (arm)	2014-05-13 16:09:35 +01:00
framebuffer.c
framebuffer.h
g364fb.c	savevm: Remove all the unneeded version_minimum_id_old (rest)	2014-05-14 15:24:51 +02:00
jazz_led.c	jazz_led: Add missing break in switch case	2014-05-24 00:07:56 +04:00
Makefile.objs	sun4m: Add Sun CG3 framebuffer and corresponding OpenBIOS FCode ROM	2014-02-27 10:01:41 +00:00
milkymist-tmu2.c	savevm: Remove all the unneeded version_minimum_id_old (rest)	2014-05-14 15:24:51 +02:00
milkymist-vgafb_template.h	milkymist-vgafb: swap pixel data in source buffer	2014-02-04 19:34:30 +01:00
milkymist-vgafb.c	savevm: Remove all the unneeded version_minimum_id_old (rest)	2014-05-14 15:24:51 +02:00
omap_dss.c
omap_lcd_template.h	hw: use ld_p/st_p instead of ld_raw/st_raw	2014-06-05 16:04:17 +02:00
omap_lcdc.c	console: add head to index to qemu consoles.	2014-03-05 09:52:04 +01:00
pl110_template.h	display: avoid multi-statement macro	2014-01-31 14:47:33 +00:00
pl110.c	console: add head to index to qemu consoles.	2014-03-05 09:52:04 +01:00
pxa2xx_lcd.c	hw/display/pxa2xx_lcd: Fix 16bpp+alpha and 18bpp+alpha palette formats	2014-05-27 17:09:49 +01:00
pxa2xx_template.h	display: avoid multi-statement macro	2014-01-31 14:47:33 +00:00
qxl-logger.c
qxl-render.c	qxl-render: add sanity check	2014-06-13 12:34:57 +02:00
qxl.c	spice: fix 32bit build	2014-06-20 16:22:07 +01:00
qxl.h	PortioList: Store PortioList in device state	2014-05-05 20:58:33 +02:00
sm501_template.h	hw: use ld_p/st_p instead of ld_raw/st_raw	2014-06-05 16:04:17 +02:00
sm501.c	console: add head to index to qemu consoles.	2014-03-05 09:52:04 +01:00
ssd0303.c	savevm: Remove all the unneeded version_minimum_id_old (arm)	2014-05-13 16:09:35 +01:00
ssd0323.c	ssd0323: fix buffer overun on invalid state load	2014-05-05 22:15:02 +02:00
tc6393xb_template.h	display: avoid multi-statement macro	2014-01-31 14:47:33 +00:00
tc6393xb.c	console: add head to index to qemu consoles.	2014-03-05 09:52:04 +01:00
tcx.c	tcx: move initialisation from realizefn to initfn	2014-06-05 20:51:57 +01:00
vga_int.h	PortioList: Store PortioList in device state	2014-05-05 20:58:33 +02:00
vga_template.h	hw: use ld_p/st_p instead of ld_raw/st_raw	2014-06-05 16:04:17 +02:00
vga-isa-mm.c	vga: allow non-global vmstate	2014-04-28 10:21:55 +02:00
vga-isa.c	vga: allow non-global vmstate	2014-04-28 10:21:55 +02:00
vga-pci.c	savevm: Remove all the unneeded version_minimum_id_old (x86)	2014-06-16 04:55:26 +02:00
vga.c	savevm: Remove all the unneeded version_minimum_id_old (x86)	2014-06-16 04:55:26 +02:00
vga.h
vmware_vga.c	savevm: Remove all the unneeded version_minimum_id_old (x86)	2014-06-16 04:55:26 +02:00
xenfb.c	xen: build on ARM	2014-07-07 10:37:40 +00:00