diff options
| author | Jeff Cody <jcody@redhat.com> | 2014-03-28 11:42:24 -0400 |
|---|---|---|
| committer | Stefan Hajnoczi <stefanha@redhat.com> | 2014-04-01 14:06:31 +0200 |
| commit | 63fa06dc978f3669dbfd9443b33cde9e2a7f4b41 (patch) | |
| tree | e3d996d1d067687d9a1a9c2a93e67d827b9e101c /migration-fd.c | |
| parent | 5e71dfad763d67bb64be79e20e93411c0c30ad25 (diff) | |
vdi: add bounds checks for blocks_in_image and disk_size header fields (CVE-2014-0144)
The maximum blocks_in_image is 0xffffffff / 4, which also limits the
maximum disk_size for a VDI image to 1024TB. Note that this is the maximum
size that QEMU will currently support with this driver, not necessarily the
maximum size allowed by the image format.
This also fixes an incorrect error message, a bug introduced by commit
5b7aa9b56d1bfc79916262f380c3fc7961becb50 (Reported by Stefan Weil)
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'migration-fd.c')
0 files changed, 0 insertions, 0 deletions