qemu-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 00/11] Fix qemu_strtosz() read-out-of-bounds


From: Hanna Czenczek
Subject: Re: [PATCH 00/11] Fix qemu_strtosz() read-out-of-bounds
Date: Tue, 9 May 2023 19:55:17 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0

On 08.05.23 22:03, Eric Blake wrote:
This series blew up in my face when Hanna first pointed me to
https://gitlab.com/qemu-project/qemu/-/issues/1629

Basically, 'qemu-img dd bs=9.9e999' killed a sanitized build because
of a read-out-of-bounds (".9e999" parses as infinity, but qemu_strtosz
wasn't expecting ERANGE failure).

The overall diffstate is big, mainly because the unit tests needed a
LOT of work before I felt comfortable tweaking semantics in something
that is so essential to command-line and QMP parsing.

Eric Blake (11):
   test-cutils: Avoid g_assert in unit tests
   test-cutils: Use g_assert_cmpuint where appropriate
   test-cutils: Test integral qemu_strto* value on failures
   test-cutils: Add coverage of qemu_strtod
   test-cutils: Prepare for upcoming semantic change in qemu_strtosz
   test-cutils: Add more coverage to qemu_strtosz
   numa: Check for qemu_strtosz_MiB error
   cutils: Set value in all qemu_strtosz* error paths
   cutils: Set value in all integral qemu_strto* error paths
   cutils: Improve qemu_strtod* error paths
   cutils: Improve qemu_strtosz handling of fractions

  hw/core/numa.c           |   11 +-
  tests/unit/test-cutils.c | 1213 ++++++++++++++++++++++++++++++--------
  util/cutils.c            |  180 ++++--
  3 files changed, 1090 insertions(+), 314 deletions(-)

Patches 1 – 5, 7 – 10:

Reviewed-by: Hanna Czenczek <hreitz@redhat.com>




reply via email to

[Prev in Thread] Current Thread [Next in Thread]