Stefan Hajnoczi 7dcffbb2bf block/cloop: refuse images with huge offsets arrays (CVE-2014-0144) ...

Limit offsets_size to 512 MB so that:

1. g_malloc() does not abort due to an unreasonable size argument.

2. offsets_size does not overflow the bdrv_pread() int size argument.

This limit imposes a maximum image size of 16 TB at 256 KB block size.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit 7b103b36d6)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>

2014-07-03 16:18:10 -05:00

..

libqos

…

multiboot

tests: Multiboot mmap test case

2013-10-28 17:34:42 +01:00

qapi-schema

…

qemu-iotests

block/cloop: refuse images with huge offsets arrays (CVE-2014-0144)

2014-07-03 16:18:10 -05:00

tcg

tests: Fix 'make test' for i686 hosts (build regression)

2014-06-25 15:23:31 -05:00

.gitignore

tests: Fix schema parser test for in-tree build

2013-10-02 22:55:27 +04:00

blockdev-test.c

blockdev-test: add test case for drive_add duplicate IDs

2013-11-07 13:58:58 +01:00

boot-order-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

check-block.sh

…

check-qdict.c

…

check-qfloat.c

…

check-qint.c

…

check-qjson.c

…

check-qlist.c

…

check-qstring.c

…

endianness-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

fdc-test.c

libqtest: rename qmp() to qmp_discard_response()

2013-11-07 13:58:43 +01:00

fw_cfg-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

hd-geo-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

i440fx-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

ide-test.c

libqtest: rename qmp() to qmp_discard_response()

2013-11-07 13:58:43 +01:00

libqtest.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

libqtest.h

libqtest: add qmp(fmt, ...) -> QDict* function

2013-11-07 13:58:53 +01:00

m48t59-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

Makefile

qdev-monitor-test: add device_add leak test cases

2013-11-07 13:58:58 +01:00

qdev-monitor-test.c

qdev-monitor-test: add device_add leak test cases

2013-11-07 13:58:58 +01:00

qemu-iotests-quick.sh

…

qom-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

rtc-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

test-aio.c

aio / timers: fix build of test/test-aio.c on non-linux platforms

2013-09-06 15:25:08 +02:00

test-bitops.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-coroutine.c

coroutine: fix /perf/nesting coroutine benchmark

2013-09-19 13:21:41 +02:00

test-cutils.c

…

test-hbitmap.c

…

test-int128.c

…

test-iov.c

…

test-mul64.c

…

test-opts-visitor.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-qdev-global-props.c

…

test-qmp-commands.c

…

test-qmp-input-strict.c

…

test-qmp-input-visitor.c

tests: fix memleak in error path test for input visitor

2013-11-05 19:58:38 -08:00

test-qmp-output-visitor.c

…

test-string-input-visitor.c

…

test-string-output-visitor.c

…

test-thread-pool.c

…

test-throttle.c

misc: New spelling fixes in comments

2013-10-26 13:01:57 +04:00

test-visitor-serialization.c

…

test-x86-cpuid.c

…

test-xbzrle.c

…

tmp105-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00