Alex Bennée 7b55742254 hw/display: check frame buffer can hold blob ...

Coverity reports (CID 1564769, 1564770) that we potentially overflow
by doing some 32x32 multiplies for something that ends up in a 64 bit
value. Fix this by first using stride for all lines and casting input
to uint64_t to ensure a 64 bit multiply is used.

Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
Cc: Dmitry Osipenko <dmitry.osipenko@collabora.com>
Reviewed-by: Dmitry Osipenko <dmitry.osipenko@collabora.com>
Tested-by: Dmitry Osipenko <dmitry.osipenko@collabora.com>
Message-ID: <20241111230040.68470-3-alex.bennee@linaro.org>
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>

2024-11-18 13:36:39 +01:00

..

acpi-vga-stub.c

acpi: pc: vga: use AcpiDevAmlIf interface to build VGA device descriptors

2022-11-07 14:00:29 -05:00

acpi-vga.c

acpi: pc: vga: use AcpiDevAmlIf interface to build VGA device descriptors

2022-11-07 14:00:29 -05:00

artist.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

ati_2d.c

hw/display/ati: allow compiling without PIXMAN

2023-11-07 14:04:25 +04:00

ati_dbg.c

ati-vga: Add 30 bit palette access register

2023-11-06 15:58:43 +04:00

ati_int.h

ati-vga: Implement fallback for pixman routines

2023-11-06 15:58:45 +04:00

ati_regs.h

ati-vga: Add 30 bit palette access register

2023-11-06 15:58:43 +04:00

ati.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

bcm2835_fb.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

bochs-display.c

hw/display: Constify VMState

2023-12-29 11:17:30 +11:00

cg3.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

cirrus_vga_internal.h

…

cirrus_vga_isa.c

display: include dependencies explicitly

2022-11-10 10:17:18 -05:00

cirrus_vga_rop2.h

…

cirrus_vga_rop.h

…

cirrus_vga.c

vga: implement horizontal pel panning in graphics modes

2024-01-18 10:43:13 +01:00

dm163.c

hw/display: Fix mirrored output in dm163

2024-09-20 08:06:57 +03:00

dpcd.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

edid-generate.c

edid: Fix clock of Detailed Timing Descriptor

2022-03-04 11:31:46 +01:00

edid-region.c

…

exynos4210_fimd.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

framebuffer.c

…

framebuffer.h

…

g364fb.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

i2c-ddc.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

jazz_led.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

Kconfig

Merge tag 'for-upstream' of https://gitlab.com/bonzini/qemu into staging

2024-10-04 19:28:37 +01:00

macfb.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

meson.build

hw/display: Remove omap_dss

2024-10-01 14:57:49 +01:00

next-fb.c

hw/display/next-fb: Fix comment typo

2022-12-03 22:07:07 +01:00

omap_lcdc.c

hw/arm/omap: Drop useless casts from void * to pointer

2023-01-12 17:15:09 +00:00

pl110_template.h

Replace config-time define HOST_WORDS_BIGENDIAN

2022-04-06 10:50:37 +02:00

pl110.c

hw/display/pl110: Pass frame buffer memory region as link property

2024-02-26 18:39:58 +01:00

qxl-logger.c

hw/display/qxl: Pass requested buffer size to qxl_phys2virt()

2022-11-29 18:15:26 -05:00

qxl-render.c

ui/console: Remove dpy_cursor_define_supported()

2024-07-16 20:04:08 +02:00

qxl.c

hw/qxl: fix -Werror=maybe-uninitialized false-positives

2024-10-02 16:14:29 +04:00

qxl.h

Replace "iothread lock" with "BQL" in comments

2024-01-08 10:45:43 -05:00

ramfb-standalone.c

hw/display: Constify VMState

2023-12-29 11:17:30 +11:00

ramfb-stubs.c

ramfb: move stubs out of stubs/

2024-04-18 11:17:27 +02:00

ramfb.c

hw/display: Constify VMState

2023-12-29 11:17:30 +11:00

sii9022.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

sm501.c

hw/char: Extract serial-mm

2024-10-03 19:33:23 +02:00

ssd0303.c

hw/display: Constify VMState

2023-12-29 11:17:30 +11:00

ssd0323.c

hw/display: Constify VMState

2023-12-29 11:17:30 +11:00

tcx.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

trace-events

virtio-gpu: Support suspension of commands processing

2024-10-28 16:56:35 +00:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00

vga_int.h

display: remove GraphicHwOps from typedefs.h

2024-05-03 15:47:48 +02:00

vga_regs.h

vga: sort-of implement word and double-word access modes

2024-01-18 10:43:14 +01:00

vga-access.h

…

vga-helpers.h

vga: optimize horizontal pel panning in 256-color modes

2024-01-18 10:43:14 +01:00

vga-isa.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

vga-mmio.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

vga-pci.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

vga.c

ui+display: rename is_buffer_shared() -> surface_is_allocated()

2024-06-19 12:42:03 +02:00

vhost-user-gpu-pci.c

modules: introduces module_kconfig directive

2022-06-06 09:26:53 +02:00

vhost-user-gpu.c

virtio: Allow .get_vhost() without vhost_started

2024-09-10 14:27:56 -04:00

vhost-user-vga.c

modules: introduces module_kconfig directive

2022-06-06 09:26:53 +02:00

virtio-dmabuf.c

hw/display: fix memleak from virtio_add_resource

2023-10-22 05:18:16 -04:00

virtio-gpu-base.c

Fix bugs when VM shutdown with virtio-gpu unplugged

2023-12-26 04:51:07 -05:00

virtio-gpu-gl.c

virtio-gpu: Support Venus context

2024-10-28 16:56:36 +00:00

virtio-gpu-pci-gl.c

modules: introduces module_kconfig directive

2022-06-06 09:26:53 +02:00

virtio-gpu-pci-rutabaga.c

virtio-gpu-rutabaga: Add empty interface to fix arm64 crash

2023-11-06 14:25:30 +04:00

virtio-gpu-pci.c

virtio-gpu: hostmem

2023-10-16 11:29:56 +04:00

virtio-gpu-rutabaga.c

virtio-gpu-rutabaga.c: override resource_destroy method

2024-02-14 06:17:44 -05:00

virtio-gpu-udmabuf-stubs.c

virtio-gpu: splitting one extended mode guest fb into n-scanouts

2021-11-05 12:29:19 +01:00

virtio-gpu-udmabuf.c

ui/console: Use qemu_dmabuf_new() and free() helpers instead

2024-05-14 17:14:12 +04:00

virtio-gpu-virgl.c

hw/display: factor out the scanout blob to fb conversion

2024-11-18 13:36:39 +01:00

virtio-gpu.c

hw/display: check frame buffer can hold blob

2024-11-18 13:36:39 +01:00

virtio-vga-gl.c

modules: introduces module_kconfig directive

2022-06-06 09:26:53 +02:00

virtio-vga-rutabaga.c

gfxstream + rutabaga: add initial support for gfxstream

2023-10-16 11:29:56 +04:00

virtio-vga.c

hw, target: Add ResetType argument to hold and exit phase methods

2024-04-25 10:21:06 +01:00

virtio-vga.h

hw/display/virtio-vga: Convert TYPE_VIRTIO_VGA_BASE to 3-phase reset

2022-12-16 15:59:07 +00:00

vmware_vga.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00

xenfb.c

ui+display: rename is_buffer_shared() -> surface_is_allocated()

2024-06-19 12:42:03 +02:00

xlnx_dp.c

hw: Use device_class_set_legacy_reset() instead of opencoding

2024-09-13 15:31:44 +01:00