]> rtime.felk.cvut.cz Git - lisovros/qemu_apohw.git/commit
projects / lisovros / qemu_apohw.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 04bc698) | patch
qcow2: Validate active L1 table offset and size (CVE-2014-0144)
authorKevin Wolf <kwolf@redhat.com>
Wed, 26 Mar 2014 12:05:46 +0000 (13:05 +0100)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Thu, 3 Jul 2014 21:18:12 +0000 (16:18 -0500)
commitcd598d41616189f33b35f69a5f7ba70c8112c272
tree2b105d1f1cce1e4501c4dd4bb421c171368e1a0ctree | snapshot
parent04bc6981ca7ea65d9d4e61b4758dcb9336fd045dcommit | diff
qcow2: Validate active L1 table offset and size (CVE-2014-0144)

This avoids an unbounded allocation.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit 2d51c32c4b511db8bb9e58208f1e2c25e4c06c85)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
block/qcow2.c diff | blob | history
tests/qemu-iotests/080 diff | blob | history
tests/qemu-iotests/080.out diff | blob | history
Virtual HW used in A0B36APO subject