)]}'
{
  "commit": "1663ffb9157e3dc17d14741f6cd6c48bfffde9d0",
  "tree": "0d126cccd878b43aca7f0dd734ac48814f217d7b",
  "parents": [
    "9db018ac56119ee8e0a87a1a340276e4c8d86392"
  ],
  "author": {
    "name": "Peter Maydell",
    "email": "peter.maydell@linaro.org",
    "time": "Fri Aug 18 16:10:55 2023 +0100"
  },
  "committer": {
    "name": "Marc-André Lureau",
    "email": "marcandre.lureau@redhat.com",
    "time": "Mon Sep 04 14:57:44 2023 +0400"
  },
  "message": "ui/spice-display: Avoid dynamic stack allocation\n\nUse an autofree heap allocation instead of a variable-length\narray on the stack in qemu_spice_create_update().\n\nThe codebase has very few VLAs, and if we can get rid of them all we\ncan make the compiler error on new additions.  This is a defensive\nmeasure against security bugs where an on-stack dynamic allocation\nisn\u0027t correctly size-checked (e.g.  CVE-2021-3527).\n\nSigned-off-by: Peter Maydell \u003cpeter.maydell@linaro.org\u003e\nReviewed-by: Philippe Mathieu-Daudé \u003cphilmd@linaro.org\u003e\nReviewed-by: Marc-André Lureau \u003cmarcandre.lureau@redhat.com\u003e\nMessage-Id: \u003c20230818151057.1541189-2-peter.maydell@linaro.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3f3f8013d8655203fec7afdbdcbe703922ebaded",
      "old_mode": 33188,
      "old_path": "ui/spice-display.c",
      "new_id": "0e2fbfb17c12c25bd2d8abad70561a016490921f",
      "new_mode": 33188,
      "new_path": "ui/spice-display.c"
    }
  ]
}