]> git.proxmox.com Git - mirror_qemu.git/commit - block/qcow2-snapshot.c
qcow2: Check maximum L1 size in qcow2_snapshot_load_tmp() (CVE-2014-0143)
authorKevin Wolf <kwolf@redhat.com>
Wed, 26 Mar 2014 12:06:06 +0000 (13:06 +0100)
committerStefan Hajnoczi <stefanha@redhat.com>
Tue, 1 Apr 2014 13:22:35 +0000 (15:22 +0200)
commit6a83f8b5bec6f59e56cc49bd49e4c3f8f805d56f
tree4063692109e5f06ece922daad860641ec0fe8421
parentc05e4667be91b46ab42b5a11babf8e84d476cc6b
qcow2: Check maximum L1 size in qcow2_snapshot_load_tmp() (CVE-2014-0143)

This avoids an unbounded allocation.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
block/qcow2-snapshot.c
block/qcow2.c
block/qcow2.h
tests/qemu-iotests/080
tests/qemu-iotests/080.out