Revised SA-16:15. The initial patch didn't cover all possible overflows
based on passing incorrect parameters to sysarch(2). [1]

Fix unchecked array reference in the VGA device emulation code. [2]

Security: SA-16:15 [1]
Security: SA-16:32 [2]
Approved by: so