diff options
author | Liam Merwick <Liam.Merwick@oracle.com> | 2018-11-05 21:38:39 +0000 |
---|---|---|
committer | Max Reitz <mreitz@redhat.com> | 2018-11-12 17:49:21 +0100 |
commit | 7cb6d3c9be2cbda05d2b14e7897e74839e48fbb2 (patch) | |
tree | 70693400826a27b43ad493c8a0eb606b24da31df /block/parallels.h | |
parent | 8d9401c2791ee2d2805b741b1ee3006041edcd3e (diff) |
qcow2: Read outside array bounds in qcow2_pre_write_overlap_check()
The commit for 0e4e4318eaa5 increments QCOW2_OL_MAX_BITNR but does not
add an array entry for QCOW2_OL_BITMAP_DIRECTORY_BITNR to metadata_ol_names[].
As a result, an array dereference of metadata_ol_names[8] in
qcow2_pre_write_overlap_check() could result in a read outside of the array bounds.
Fixes: 0e4e4318eaa5 ('qcow2: add overlap check for bitmap directory')
Cc: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Signed-off-by: Liam Merwick <Liam.Merwick@oracle.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 1541453919-25973-6-git-send-email-Liam.Merwick@oracle.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
Diffstat (limited to 'block/parallels.h')
0 files changed, 0 insertions, 0 deletions