Re: [Qemu-stable] [Qemu-devel] [PATCH for-2.0 23/47] qcow2: Validate snapshot table offset/size (CVE-2014-0144)

[Max Reitz]

On 26.03.2014 13:05, Stefan Hajnoczi wrote:
> From: Kevin Wolf <address@hidden>
>
> This avoid unbounded memory allocation and fixes a potential buffer
> overflow on 32 bit hosts.
>
> Signed-off-by: Kevin Wolf <address@hidden>
> ---
>   block/qcow2-snapshot.c     | 29 ++++-------------------------
>   block/qcow2.c              | 15 +++++++++++++++
>   block/qcow2.h              | 29 ++++++++++++++++++++++++++++-
>   tests/qemu-iotests/080     | 27 +++++++++++++++++++++++++++
>   tests/qemu-iotests/080.out | 17 +++++++++++++++++
>   5 files changed, 91 insertions(+), 26 deletions(-)

Reviewed-by: Max Reitz <address@hidden>