]> Git Repo - qemu.git/commit
block: Limit request size (CVE-2014-0143)
authorKevin Wolf <[email protected]>
Wed, 26 Mar 2014 12:06:02 +0000 (13:06 +0100)
committerStefan Hajnoczi <[email protected]>
Tue, 1 Apr 2014 13:22:35 +0000 (15:22 +0200)
commit8f4754ede56e3f9ea3fd7207f4a7c4453e59285b
treeed302e11235c73e0fe503881cf29ace996ddcb26
parent1e7226f70c9d944ae7f233b65fb4adda8f910dfe
block: Limit request size (CVE-2014-0143)

Limiting the size of a single request to INT_MAX not only fixes a
direct integer overflow in bdrv_check_request() (which would only
trigger bad behaviour with ridiculously huge images, as in close to
2^64 bytes), but can also prevent overflows in all block drivers.

Signed-off-by: Kevin Wolf <[email protected]>
Reviewed-by: Max Reitz <[email protected]>
Signed-off-by: Stefan Hajnoczi <[email protected]>
block.c
This page took 0.026056 seconds and 4 git commands to generate.