Re: [Qemu-devel] [PATCH for-2.0 21/47] qcow2: Check refcount table size (CVE-2014-0144)

[Max Reitz]

On 26.03.2014 13:05, Stefan Hajnoczi wrote:
> From: Kevin Wolf <address@hidden>
>
> Limit the in-memory reference count table size to 8 MB, it's enough in
> practice. This fixes an unbounded allocation as well as a buffer
> overflow in qcow2_refcount_init().
>
> Signed-off-by: Kevin Wolf <address@hidden>
> ---
>   block/qcow2-refcount.c     |  4 +++-
>   block/qcow2.c              |  9 +++++++++
>   tests/qemu-iotests/080     | 10 ++++++++++
>   tests/qemu-iotests/080.out |  7 +++++++
>   4 files changed, 29 insertions(+), 1 deletion(-)

Reviewed-by: Max Reitz <address@hidden>