diff options
| author | Stefan Hajnoczi <stefanha@redhat.com> | 2014-03-26 13:05:28 +0100 |
|---|---|---|
| committer | Stefan Hajnoczi <stefanha@redhat.com> | 2014-04-01 13:59:47 +0200 |
| commit | f56b9bc3ae20fc93815b34aa022be919941406ce (patch) | |
| tree | 678a4325d4277d2c272f895d01523a863bfb3668 /tests/qemu-iotests/022 | |
| parent | 7b103b36d6ef3b11827c203d3a793bf7da50ecd6 (diff) | |
block/cloop: refuse images with bogus offsets (CVE-2014-0144)
The offsets[] array allows efficient seeking and tells us the maximum
compressed data size. If the offsets are bogus the maximum compressed
data size will be unrealistic.
This could cause g_malloc() to abort and bogus offsets mean the image is
broken anyway. Therefore we should refuse such images.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'tests/qemu-iotests/022')
0 files changed, 0 insertions, 0 deletions