Ref: http://seclists.org/oss-sec/2017/q1/176
============================================
  Hello,

Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for
the virtio GPU, is vulnerable to an OOB array access issue. It could occur when
parsing texture instructions in parse_instruction().


A guest user/process could use this flaw to crash the Qemu process instance
resulting DoS.


Upstream patch:
---------------
  ->
https://lists.freedesktop.org/archives/virglrenderer-devel/2017-January/000105.html

Reference:
----------
  -> https://bugzilla.redhat.com/show_bug.cgi?id=1415986

This issue was reported by Li Qiang of 360.cn Inc.

Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F
============================================

https://software.opensuse.org/package/virglrenderer

Bug ID	1021627
Summary	VUL-0: virglrenderer: OOB access while parsing texture instruction
Classification	openSUSE
Product	openSUSE Distribution
Version	Leap 42.2
Hardware	Other
OS	Other
Status	NEW
Severity	Normal
Priority	P5 - None
Component	Security
Assignee	security-team@suse.de
Reporter	mikhail.kasimov@gmail.com
QA Contact	qa-bugs@suse.de
Found By	---
Blocker	---