Wind River Support Network

HomeDefectsLIN6-9669
Fixed

LIN6-9669 : WRlinux6, qemu vga output don't work after apply the patch for CVE-2014-3615

Created: Apr 2, 2015    Updated: Dec 3, 2018
Resolved Date: Apr 16, 2015
Found In Version: 6.0.0.1,6.0.0.15
Fix Version: 6.0.0.20
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

Customer use WRlinux6.0.0.1, and they get the patch for CVE-2014-3615 and applied it. After apply the patch, they found that virtual machine vga output is not normal.

This is easy to reproduce by start a virtual machine by the following command:
qemu-system-x86_64 -nographic -M pc -m 1024 -smp 2 -drive file=/media/opt/win7.img -cdrom /media/opt/7100.0.090421-1700_x86fre_client_en-us_retail_ultimate-grc1culfrer_en_dvd.iso -vga std -vnc 172.25.52.249:1

From other host, access the vm by vncviewer, the vga output is not normal.

If remove the patches and rebuild the qemu, the VGA output work fine:
qemu-CVE-2014-3615-1.patch
qemu-CVE-2014-3615-2.patch

Steps to Reproduce

1. configure a project by the following options:
wrlinux-6/wrlinux/configure --enable-board=intel-x86-64 --enable-kernel=standard+features/kvm/qemu-kvm-enable.scc --enable-rootfs=glibc_std --with-layer=wr-dpdk --with-template=feature/initramfs,feature/kvm --enable-parallel-pkgbuilds=8 --enable-jobs=8 --enable-reconfig --enable-internet-download=yes --with-rcpl-version=0015

2. Apply the patch for CVE-2014-3615 to project:
qemu-CVE-2014-3615-1.patch
qemu-CVE-2014-3615-2.patch

3. boot target, start a vm by the following command:
qemu-system-x86_64 -nographic -M pc -m 1024 -smp 2 -drive file=/media/opt/win7.img -cdrom /media/opt/7100.0.090421-1700_x86fre_client_en-us_retail_ultimate-grc1culfrer_en_dvd.iso -vga std -vnc 172.25.52.249:1

4. From another host, run vncviewere:
vncviewer 172.25.52.249:1

When the vm boot, the windows 7 installer start, the vga output is not normal.

Other Downloads


Live chat
Online