projects / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eb71803) | patch
dmg: sanitize chunk length and sectorcount (CVE-2014-0145)
authorStefan Hajnoczi <stefanha@redhat.com>
Wed, 26 Mar 2014 12:05:58 +0000 (13:05 +0100)
committerStefan Hajnoczi <stefanha@redhat.com>
Tue, 1 Apr 2014 13:22:35 +0000 (15:22 +0200)
commitc165f7758009a4f793c1fc19ebb69cf55313450b
tree1df17ab2f0ad8c601252cc2e363b7de4ec77e050tree | snapshot
parenteb71803b041f55779ea10d860c0f66df285c68decommit | diff
dmg: sanitize chunk length and sectorcount (CVE-2014-0145)

Chunk length and sectorcount are used for decompression buffers as well
as the bdrv_pread() count argument.  Ensure that they have reasonable
values so neither memory allocation nor conversion from uint64_t to int
will cause problems.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
block/dmg.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.