Re: [Qemu-devel] [PATCH 0/5] qcow1: Input validation fixes

[Stefan Hajnoczi]

On Mon, May 12, 2014 at 03:04:06PM +0200, Kevin Wolf wrote:
> Kevin Wolf (5):
>   qcow1: Make padding in the header explicit
>   qcow1: Check maximum cluster size
>   qcow1: Validate L2 table size (CVE-2014-0222)
>   qcow1: Validate image size (CVE-2014-0223)
>   qcow1: Stricter backing file length check
> 
>  block/qcow.c               | 44 +++++++++++++++++++----
>  tests/qemu-iotests/092     | 90 
> ++++++++++++++++++++++++++++++++++++++++++++++
>  tests/qemu-iotests/092.out | 30 ++++++++++++++++
>  tests/qemu-iotests/group   |  1 +
>  4 files changed, 158 insertions(+), 7 deletions(-)
>  create mode 100755 tests/qemu-iotests/092
>  create mode 100644 tests/qemu-iotests/092.out

Looks good overall.  No Reviewed-by yet because I'm curious about the
answer to Benoit's questions about the poke_file constants.

Stefan