diff options
| author | Stefan Hajnoczi <stefanha@redhat.com> | 2014-03-26 13:05:58 +0100 |
|---|---|---|
| committer | Stefan Hajnoczi <stefanha@redhat.com> | 2014-04-01 15:22:35 +0200 |
| commit | c165f7758009a4f793c1fc19ebb69cf55313450b (patch) | |
| tree | 1df17ab2f0ad8c601252cc2e363b7de4ec77e050 /COPYING.LIB | |
| parent | eb71803b041f55779ea10d860c0f66df285c68de (diff) | |
dmg: sanitize chunk length and sectorcount (CVE-2014-0145)
Chunk length and sectorcount are used for decompression buffers as well
as the bdrv_pread() count argument. Ensure that they have reasonable
values so neither memory allocation nor conversion from uint64_t to int
will cause problems.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'COPYING.LIB')
0 files changed, 0 insertions, 0 deletions