mirror of https://gitlab.com/qemu-project/qemu
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
579be921f5
In fimd_update_memory_section() we attempt ot find and map part of the RAM MR which backs the framebuffer, based on guest-configurable size and start address. If the guest configures framebuffer settings which result in a zero-sized framebuffer, we hit an assertion(), because memory_region_find() will return a NULL mem_section.mr. Explicitly check for the zero-size case and treat this as a guest error. Because we now have a code path which can reach error_return without calling memory_region_find to set w->mem_section, we must NULL out w->mem_section.mr after the unref of the old MR, so that error_return does not incorrectly double-unref the old MR. Cc: qemu-stable@nongnu.org Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1407 Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org> Message-id: 20251107143913.1341358-1-peter.maydell@linaro.org |
2 weeks ago | |
|---|---|---|
| .. | ||
| Kconfig | 9 months ago | |
| acpi-vga-stub.c | 3 years ago | |
| acpi-vga.c | 3 years ago | |
| apple-gfx-mmio.m | 7 months ago | |
| apple-gfx-pci.m | 7 months ago | |
| apple-gfx.h | 8 months ago | |
| apple-gfx.m | 6 months ago | |
| artist.c | 5 months ago | |
| ati.c | 5 months ago | |
| ati_2d.c | 2 years ago | |
| ati_dbg.c | 2 years ago | |
| ati_int.h | 2 years ago | |
| ati_regs.h | 2 years ago | |
| bcm2835_fb.c | 3 months ago | |
| bochs-display.c | 7 months ago | |
| cg3.c | 7 months ago | |
| cirrus_vga.c | 7 months ago | |
| cirrus_vga_internal.h | ||
| cirrus_vga_isa.c | 7 months ago | |
| cirrus_vga_rop.h | ||
| cirrus_vga_rop2.h | ||
| dm163.c | 7 months ago | |
| dpcd.c | 7 months ago | |
| edid-generate.c | 4 years ago | |
| edid-region.c | 8 months ago | |
| exynos4210_fimd.c | 2 weeks ago | |
| framebuffer.c | 4 months ago | |
| framebuffer.h | 8 months ago | |
| g364fb.c | 7 months ago | |
| i2c-ddc.c | 7 months ago | |
| jazz_led.c | 7 months ago | |
| macfb.c | 7 months ago | |
| meson.build | 9 months ago | |
| next-fb.c | 7 months ago | |
| omap_lcdc.c | 3 years ago | |
| pl110.c | 7 months ago | |
| pl110_template.h | 4 years ago | |
| qxl-logger.c | 3 years ago | |
| qxl-render.c | 4 months ago | |
| qxl.c | 7 months ago | |
| qxl.h | 2 years ago | |
| ramfb-standalone.c | 5 months ago | |
| ramfb-stubs.c | 5 months ago | |
| ramfb.c | 5 months ago | |
| sii9022.c | 7 months ago | |
| sm501.c | 4 months ago | |
| ssd0303.c | 7 months ago | |
| ssd0323.c | 7 months ago | |
| tcx.c | 7 months ago | |
| trace-events | 2 months ago | |
| trace.h | ||
| vga-access.h | ||
| vga-helpers.h | 2 years ago | |
| vga-isa.c | 7 months ago | |
| vga-mmio.c | 7 months ago | |
| vga-pci.c | 7 months ago | |
| vga.c | 5 months ago | |
| vga_int.h | 8 months ago | |
| vga_regs.h | 2 years ago | |
| vhost-user-gpu-pci.c | 4 years ago | |
| vhost-user-gpu.c | 7 months ago | |
| vhost-user-vga.c | 4 years ago | |
| virtio-dmabuf.c | 2 years ago | |
| virtio-gpu-base.c | 5 months ago | |
| virtio-gpu-gl.c | 7 months ago | |
| virtio-gpu-pci-gl.c | 4 years ago | |
| virtio-gpu-pci-rutabaga.c | 7 months ago | |
| virtio-gpu-pci.c | 7 months ago | |
| virtio-gpu-rutabaga.c | 7 months ago | |
| virtio-gpu-udmabuf-stubs.c | ||
| virtio-gpu-udmabuf.c | 7 months ago | |
| virtio-gpu-virgl.c | 2 months ago | |
| virtio-gpu.c | 1 month ago | |
| virtio-vga-gl.c | 4 years ago | |
| virtio-vga-rutabaga.c | 2 years ago | |
| virtio-vga.c | 7 months ago | |
| virtio-vga.h | 3 years ago | |
| vmware_vga.c | 6 months ago | |
| xenfb.c | 2 months ago | |
| xlnx_dp.c | 3 weeks ago | |