diff options
| author | Kevin Wolf <kwolf@redhat.com> | 2009-07-07 18:09:42 +0200 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2009-07-10 13:44:29 -0500 |
| commit | 3f6a3ee51ebd1e86c48ff1216f5caf9785913ab5 (patch) | |
| tree | ad855afc990fe0a4fd24c9c7082821649c3e48fc /block/qcow2.c | |
| parent | c53ffce91b3e7d8b9d36e4e8bf82c38baf72b337 (diff) | |
qcow2: Fix L1 table memory allocation
Contrary to what one could expect, the size of L1 tables is not cluster
aligned. So as we're writing whole sectors now instead of single entries,
we need to ensure that the L1 table in memory is large enough; otherwise
write would access memory after the end of the L1 table.
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'block/qcow2.c')
| -rw-r--r-- | block/qcow2.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/block/qcow2.c b/block/qcow2.c index 9a7c666ee7..be507e7a9c 100644 --- a/block/qcow2.c +++ b/block/qcow2.c @@ -200,7 +200,8 @@ static int qcow_open(BlockDriverState *bs, const char *filename, int flags) if (s->l1_size < s->l1_vm_state_index) goto fail; s->l1_table_offset = header.l1_table_offset; - s->l1_table = qemu_malloc(s->l1_size * sizeof(uint64_t)); + s->l1_table = qemu_mallocz( + align_offset(s->l1_size * sizeof(uint64_t), 512)); if (bdrv_pread(s->hd, s->l1_table_offset, s->l1_table, s->l1_size * sizeof(uint64_t)) != s->l1_size * sizeof(uint64_t)) goto fail; |