[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [Bug 1355697] Re: qemu-img: Segfault on a fuzzed image with
From: |
Max Reitz |
Subject: |
[Qemu-devel] [Bug 1355697] Re: qemu-img: Segfault on a fuzzed image with large values of L1/L2 entries |
Date: |
Tue, 21 Oct 2014 11:10:37 -0000 |
Hi,
Okay, so this image has the same “issue” (it's intentionally broken, so
it's not really an issue) as the one in bug 1355738: There are corrupted
L2 entries which are impossible for qemu to repair. Therefore, we could
only ask the user to use qemu-img convert and that's all we can do.
Therefore, I'm marking this fixed as well.
Max
** Changed in: qemu
Status: New => Fix Committed
--
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1355697
Title:
qemu-img: Segfault on a fuzzed image with large values of L1/L2
entries
Status in QEMU:
Fix Committed
Bug description:
'qemu-img check -r all/leaks' failed with a segmentation fault on the
fuzzed image with L1/L2 entry values having UINT64 border values.
Sequence:
1. Unpack the attached archive, make a copy of test.img
2. Put copy.img and backing_img.raw in the same directory
3. Execute
qemu-img check -f qcow2 -r all copy.img
Result: qemu-img was killed by SIGSEGV.
The qemu-img execution log can be found in the attached archive.
qemu.git HEAD 2d591ce2aeebf
To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1355697/+subscriptions