|
From: | Max Reitz |
Subject: | Re: [Qemu-devel] [PATCH for-2.0 20/47] qcow2: Check backing_file_offset (CVE-2014-0144) |
Date: | Wed, 26 Mar 2014 21:46:02 +0100 |
User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 |
On 26.03.2014 13:05, Stefan Hajnoczi wrote:
From: Kevin Wolf <address@hidden> Header, header extension and the backing file name must all be stored in the first cluster. Setting the backing file to a much higher value allowed header extensions to become much bigger than we want them to be (unbounded allocation). Signed-off-by: Kevin Wolf <address@hidden> --- block/qcow2.c | 6 ++++++ tests/qemu-iotests/080 | 12 ++++++++++++ tests/qemu-iotests/080.out | 7 +++++++ 3 files changed, 25 insertions(+)
Reviewed-by: Max Reitz <address@hidden>
[Prev in Thread] | Current Thread | [Next in Thread] |