Fiona Ebner ebfbf39467 ui/vnc-clipboard: fix inflate_buffer ...

Commit d921fea338 ("ui/vnc-clipboard: fix infinite loop in
inflate_buffer (CVE-2023-3255)") removed this hunk, but it is still
required, because it can happen that stream.avail_in becomes zero
before coming across a return value of Z_STREAM_END in the loop.

This fixes the host->guest direction of the clipboard with noVNC and
TigerVNC as clients.

Fixes: d921fea338 ("ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)")
Reported-by: Friedrich Weber <f.weber@proxmox.com>
Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
Acked-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20231122125826.228189-1-f.ebner@proxmox.com>

2023-12-04 11:28:26 +04:00

..

icons

…

shader

meson: do not build shaders by default

2023-10-17 15:20:53 +02:00

clipboard.c

…

cocoa.m

ui/cocoa: add zoom-to-fit display option

2023-11-07 11:45:48 +04:00

console-gl.c

ui/console: remove redundant format field

2023-09-12 10:37:02 +04:00

console-priv.h

ui/vc: split off the VC part from console.c

2023-09-12 10:37:02 +04:00

console-vc-stubs.c

ui/vc: console-vc requires PIXMAN

2023-11-07 14:04:25 +04:00

console-vc.c

ui/vc: split off the VC part from console.c

2023-09-12 10:37:02 +04:00

console.c

ui/console: fix default VC when there are no display

2023-11-21 14:38:14 +04:00

curses_keys.h

For curses display, recognize a few more control keys

2023-07-25 10:56:51 +01:00

curses.c

ui/vc: rename kbd_put to qemu_text_console functions

2023-09-12 10:37:02 +04:00

cursor_hidden.xpm

…

cursor_left_ptr.xpm

…

cursor.c

…

dbus-chardev.c

…

dbus-clipboard.c

…

dbus-console.c

input: Allow to choose console with qemu_input_is_absolute

2023-10-03 15:04:56 +04:00

dbus-display1.xml

ui/dbus: use shared D3D11 Texture2D when possible

2023-06-27 17:08:56 +02:00

dbus-error.c

…

dbus-listener.c

ui/dbus: do not require PIXMAN

2023-11-07 14:04:25 +04:00

dbus-module.c

…

dbus.c

ui: use "vc" chardev for dbus, gtk & spice-app

2023-11-21 14:38:14 +04:00

dbus.h

…

egl-context.c

…

egl-headless.c

ui: add optional d3d texture pointer to scanout texture

2023-06-27 17:08:56 +02:00

egl-helpers.c

virtio-gpu-udmabuf: correct naming of QemuDmaBuf size properties

2023-07-17 15:22:28 +04:00

gtk-clipboard.c

…

gtk-egl.c

ui/gtk-egl: move function calls back to regular code path

2023-12-04 10:55:18 +04:00

gtk-gl-area.c

ui/gtk: set scanout mode in gd_egl/gd_gl_area_scanout_texture

2023-08-07 17:13:42 +04:00

gtk.c

ui: use "vc" chardev for dbus, gtk & spice-app

2023-11-21 14:38:14 +04:00

input-barrier.c

…

input-barrier.h

…

input-keymap.c

…

input-legacy.c

ui/input: Constify QemuInputHandler structure

2023-10-19 23:13:28 +02:00

input-linux.c

…

input.c

ui/input: Constify QemuInputHandler structure

2023-10-19 23:13:28 +02:00

kbd-state.c

…

keymaps.c

…

keymaps.h

ui: spelling fixes

2023-08-31 19:47:43 +02:00

meson.build

ui/dbus: do not require PIXMAN

2023-11-07 14:04:25 +04:00

qemu-pixman.c

ui: compile out some qemu-pixman functions when !PIXMAN

2023-11-07 14:04:24 +04:00

qemu-x509.h

…

qemu.desktop

…

sdl2-2d.c

ui: spelling fixes

2023-08-31 19:47:43 +02:00

sdl2-gl.c

ui: add optional d3d texture pointer to scanout texture

2023-06-27 17:08:56 +02:00

sdl2-input.c

ui/vc: rename kbd_put to qemu_text_console functions

2023-09-12 10:37:02 +04:00

sdl2.c

ui/sdl2: use correct key names in win title on mac

2023-11-07 13:08:49 +01:00

shader.c

…

spice-app.c

ui: use "vc" chardev for dbus, gtk & spice-app

2023-11-21 14:38:14 +04:00

spice-core.c

migration: simplify notifiers

2023-10-20 08:51:41 +02:00

spice-display.c

ui: Clean up local variable shadowing

2023-09-29 08:13:57 +02:00

spice-input.c

input: Allow to choose console with qemu_input_is_absolute

2023-10-03 15:04:56 +04:00

spice-module.c

…

trace-events

input: Allow to choose console with qemu_input_is_absolute

2023-10-03 15:04:56 +04:00

trace.h

…

udmabuf.c

…

ui-hmp-cmds.c

qmp/hmp: disable screendump if PIXMAN is missing

2023-11-07 14:04:25 +04:00

ui-qmp-cmds.c

ui/qmp-cmds: Improve two error messages

2023-11-17 10:07:52 +01:00

util.c

…

vdagent.c

Merge tag 'migration-20231020-pull-request' of https://gitlab.com/juan.quintela/qemu into staging

2023-10-20 06:46:53 -07:00

vgafont.h

…

vnc_keysym.h

…

vnc-auth-sasl.c

…

vnc-auth-sasl.h

…

vnc-auth-vencrypt.c

…

vnc-auth-vencrypt.h

…

vnc-clipboard.c

ui/vnc-clipboard: fix inflate_buffer

2023-12-04 11:28:26 +04:00

vnc-enc-hextile-template.h

ui/vnc-enc-hextile: Use static rather than dynamic length stack array

2023-09-04 14:57:44 +04:00

vnc-enc-hextile.c

…

vnc-enc-tight.c

ui/vnc-enc-tight: Avoid dynamic stack allocation

2023-09-04 14:57:44 +04:00

vnc-enc-tight.h

…

vnc-enc-zlib.c

…

vnc-enc-zrle.c

…

vnc-enc-zrle.c.inc

ui: Clean up local variable shadowing

2023-09-29 08:13:57 +02:00

vnc-enc-zrle.h

…

vnc-enc-zywrle-template.c

…

vnc-enc-zywrle.h

ui: spelling fixes

2023-08-31 19:47:43 +02:00

vnc-jobs.c

…

vnc-jobs.h

…

vnc-palette.c

ui: Clean up local variable shadowing

2023-09-29 08:13:57 +02:00

vnc-palette.h

…

vnc-stubs.c

qemu-options: define -vnc only #ifdef CONFIG_VNC

2023-11-07 14:04:25 +04:00

vnc-ws.c

…

vnc-ws.h

…

vnc.c

audio: reintroduce default audio backend for VNC

2023-10-08 21:08:27 +02:00

vnc.h

ui/vnc: Require audiodev= to enable audio

2023-10-03 10:29:39 +02:00

win32-kbd-hook.c

…

x_keymap.c

…

x_keymap.h

…