Re: [Qemu-stable] [Qemu-devel] [PATCH for-2.0 24/47] qcow2: Validate active L1 table offset and size (CVE-2014-0144)

[Max Reitz]

On 26.03.2014 13:05, Stefan Hajnoczi wrote:
> From: Kevin Wolf <address@hidden>
>
> This avoids an unbounded allocation.
>
> Signed-off-by: Kevin Wolf <address@hidden>
> ---
>   block/qcow2.c              | 16 ++++++++++++++++
>   tests/qemu-iotests/080     | 18 ++++++++++++++++++
>   tests/qemu-iotests/080.out | 11 +++++++++++
>   3 files changed, 45 insertions(+)

Reviewed-by: Max Reitz <address@hidden>