Kevin Wolf 04bc6981ca qcow2: Validate snapshot table offset/size (CVE-2014-0144) ...

This avoid unbounded memory allocation and fixes a potential buffer
overflow on 32 bit hosts.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit ce48f2f441)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>

2014-07-03 16:18:12 -05:00

..

libqos

libqos: Generalize I/O-mapped fw_cfg

2013-07-18 13:27:47 -05:00

multiboot

tests: Multiboot mmap test case

2013-10-28 17:34:42 +01:00

qapi-schema

OptsVisitor: introduce unit tests, with test cases for range flattening

2013-08-20 11:52:00 -04:00

qemu-iotests

qcow2: Validate snapshot table offset/size (CVE-2014-0144)

2014-07-03 16:18:12 -05:00

tcg

tests: Fix 'make test' for i686 hosts (build regression)

2014-06-25 15:23:31 -05:00

.gitignore

tests: Fix schema parser test for in-tree build

2013-10-02 22:55:27 +04:00

blockdev-test.c

blockdev-test: add test case for drive_add duplicate IDs

2013-11-07 13:58:58 +01:00

boot-order-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

check-block.sh

…

check-qdict.c

…

check-qfloat.c

…

check-qint.c

…

check-qjson.c

qjson: to_json() case QTYPE_QSTRING is buggy, rewrite

2013-04-13 19:40:25 +00:00

check-qlist.c

…

check-qstring.c

…

endianness-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

fdc-test.c

libqtest: rename qmp() to qmp_discard_response()

2013-11-07 13:58:43 +01:00

fw_cfg-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

hd-geo-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

i440fx-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

ide-test.c

libqtest: rename qmp() to qmp_discard_response()

2013-11-07 13:58:43 +01:00

libqtest.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

libqtest.h

libqtest: add qmp(fmt, ...) -> QDict* function

2013-11-07 13:58:53 +01:00

m48t59-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

Makefile

qdev-monitor-test: add device_add leak test cases

2013-11-07 13:58:58 +01:00

qdev-monitor-test.c

qdev-monitor-test: add device_add leak test cases

2013-11-07 13:58:58 +01:00

qemu-iotests-quick.sh

…

qom-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

rtc-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

test-aio.c

aio / timers: fix build of test/test-aio.c on non-linux platforms

2013-09-06 15:25:08 +02:00

test-bitops.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-coroutine.c

coroutine: fix /perf/nesting coroutine benchmark

2013-09-19 13:21:41 +02:00

test-cutils.c

…

test-hbitmap.c

…

test-int128.c

int128: optimize and add test cases

2013-07-02 08:17:01 +02:00

test-iov.c

…

test-mul64.c

…

test-opts-visitor.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-qdev-global-props.c

qdev: Set globals in instance_post_init function

2013-08-16 18:44:33 +02:00

test-qmp-commands.c

…

test-qmp-input-strict.c

…

test-qmp-input-visitor.c

tests: fix memleak in error path test for input visitor

2013-11-05 19:58:38 -08:00

test-qmp-output-visitor.c

misc: Use g_assert_not_reached for code which is expected to be unreachable

2013-07-27 11:22:54 +04:00

test-string-input-visitor.c

…

test-string-output-visitor.c

…

test-thread-pool.c

aio / timers: Add QEMUTimerListGroup to AioContext

2013-08-22 19:10:27 +02:00

test-throttle.c

misc: New spelling fixes in comments

2013-10-26 13:01:57 +04:00

test-visitor-serialization.c

misc: Use g_assert_not_reached for code which is expected to be unreachable

2013-07-27 11:22:54 +04:00

test-x86-cpuid.c

…

test-xbzrle.c

…

tmp105-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00