3 ms·

The linked repo wasn't updated in 8 months, up-to-date code is here: https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Graphics/DevVGA-SVGA3d-shar

The linked repo wasn't updated in 8 months, up-to-date code is here: https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Graphics/DevVGA-SVGA3d-shared.cpp#L332 https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devic... I think this was the fix: https://www.virtualbox.org/changeset/108903/vbox/trunk/src/VBox/Devices/Graphics/DevVGA-SVGA3d-shared.cpp https://www.virtualbox.org/changeset/108903/vbox/trunk/src/V...

johnisgood 1y ago
Thanks. Wild. I bet the codebase is full of code like the originally exploitable one. At this point maybe one should use wrappers for all sorts of calculations. :D