Changeset 49427 in vbox

Timestamp:

Nov 8, 2013 4:55:32 PM (11 years ago)

Author:

vboxsync

Message:

DevVGA: check parameter.

File:

• trunk/src/VBox/Devices/Graphics/DevVGA_VBVA.cpp (modified) (1 diff)

trunk/src/VBox/Devices/Graphics/DevVGA_VBVA.cpp

@@ -630 +630 @@
     if (fShape)
     {
+         if (pShape->u32Width > 8192 || pShape->u32Height > 8192)
+         {
+             Log(("vbvaMousePointerShape: unsupported size %ux%u\n",
+                   pShape->u32Width, pShape->u32Height));
+             return VERR_INVALID_PARAMETER;
+         }
+
          cbPointerData = ((((pShape->u32Width + 7) / 8) * pShape->u32Height + 3) & ~3)
                          + pShape->u32Width * 4 * pShape->u32Height;