Re: [Qemu-devel] [PATCH for-2.0 44/47] qcow2: Check maximum L1 size in qcow2_snapshot_load_tmp() (CVE-2014-0143)

[Max Reitz]

On 26.03.2014 13:06, Stefan Hajnoczi wrote:
> From: Kevin Wolf <address@hidden>
>
> This avoids an unbounded allocation.
>
> Signed-off-by: Kevin Wolf <address@hidden>
> ---
>   block/qcow2-snapshot.c     |  4 ++++
>   block/qcow2.c              |  4 +---
>   block/qcow2.h              |  4 ++++
>   tests/qemu-iotests/080     | 15 ++++++++++++++-
>   tests/qemu-iotests/080.out |  6 ++++++
>   5 files changed, 29 insertions(+), 4 deletions(-)

Reviewed-by: Max Reitz <address@hidden>