Kevin Wolf 42eb58179b qcow1: Validate L2 table size (CVE-2014-0222)
Too large L2 table sizes cause unbounded allocations. Images actually
created by qemu-img only have 512 byte or 4k L2 tables.

To keep things consistent with cluster sizes, allow ranges between 512
bytes and 64k (in fact, down to 1 entry = 8 bytes is technically
working, but L2 table sizes smaller than a cluster don't make a lot of
sense).

This also means that the number of bytes on the virtual disk that are
described by the same L2 table is limited to at most 8k * 64k or 2^29,
preventively avoiding any integer overflows.

Cc: qemu-stable@nongnu.org
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Benoit Canet <benoit@irqsave.net>
2014-05-19 11:36:49 +02:00
2014-04-23 10:28:14 +02:00
2014-05-15 18:01:47 +01:00
2014-05-19 11:36:48 +02:00
2014-04-25 12:59:57 +02:00
2014-04-28 13:43:17 +01:00
2014-05-15 14:24:05 +02:00
2014-05-09 09:11:31 -04:00
2014-05-19 11:36:48 +02:00
2014-05-15 14:24:05 +02:00
2014-04-25 09:19:58 -04:00
2014-05-15 16:24:12 +01:00
2014-04-28 08:55:31 +04:00
2014-03-12 17:26:32 +01:00
2014-05-14 15:24:51 +02:00
2014-05-19 11:36:49 +02:00
2013-10-11 09:34:56 -07:00
2014-05-15 18:56:08 +01:00
2014-05-07 17:16:03 +01:00
2014-02-21 21:02:23 +01:00
2014-03-13 14:34:16 +00:00
2014-02-25 14:30:28 +01:00
2014-04-18 10:33:36 +04:00
2014-04-22 12:00:20 +02:00
2014-04-22 12:00:20 +02:00
2013-12-04 15:19:00 +01:00
2014-05-19 11:36:49 +02:00
2013-10-11 09:34:56 -07:00
2014-05-09 22:59:40 +02:00
2014-02-17 11:57:23 -05:00
2014-04-17 20:39:32 +01:00
2013-10-11 09:34:56 -07:00
2014-05-09 20:57:32 +02:00
2014-05-07 16:16:43 +00:00

Read the documentation in qemu-doc.html or on http://wiki.qemu-project.org

- QEMU team
Description
QEMU With E2K User Support
Readme 459 MiB
Languages
C 83.1%
C++ 6.3%
Python 3.2%
Dylan 2.8%
Shell 1.6%
Other 2.8%