Max Reitz 91f827dcff qcow2: Avoid overflow in alloc_clusters_noref() ...

alloc_clusters_noref() stores the cluster index in a uint64_t. However,
offsets are often represented as int64_t (as for example the return
value of alloc_clusters_noref() itself demonstrates). Therefore, we
should make sure all offsets in the allocated range of clusters are
representable using int64_t without overflows.

Signed-off-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>

2014-04-30 14:46:13 +02:00

..

backup.c

…

blkdebug.c

…

blkverify.c

block: Rewrite the snapshot authorization mechanism for block filters.

2014-03-13 14:23:27 +01:00

bochs.c

bochs: Fix catalog size check

2014-04-11 13:59:49 +02:00

cloop.c

block/cloop: use PRIu32 format specifier for uint32_t

2014-04-23 11:34:10 +02:00

commit.c

qerror.h: Remove QERR defines that are only used once

2014-04-25 09:19:59 -04:00

cow.c

…

curl.c

curl: Replaced old error handling with error reporting API.

2014-04-22 11:57:02 +02:00

dmg.c

dmg: prevent chunk buffer overflow (CVE-2014-0145)

2014-04-01 15:22:35 +02:00

gluster.c

Fixed various typos

2014-03-25 14:09:50 +01:00

iscsi.c

iscsi: Don't use error_is_set() to suppress additional errors

2014-04-25 18:05:06 +02:00

linux-aio.c

…

Makefile.objs

…

mirror.c

mirror: Check for bdrv_get_info result

2014-04-29 13:43:08 +02:00

nbd-client.c

nbd: close socket if connection breaks

2014-03-14 16:28:28 +01:00

nbd-client.h

…

nbd.c

nbd: Use return values instead of error_is_set(errp)

2014-04-25 18:05:06 +02:00

nfs.c

Use error_is_set() only when necessary (again)

2014-04-25 18:05:06 +02:00

parallels.c

parallels: Sanity check for s->tracks (CVE-2014-0142)

2014-04-01 15:22:35 +02:00

qapi.c

block: Use error_abort in bdrv_image_info_specific_dump()

2014-04-30 12:43:30 +02:00

qcow2-cache.c

…

qcow2-cluster.c

qcow2: Fix discard

2014-04-29 16:39:51 +02:00

qcow2-refcount.c

qcow2: Avoid overflow in alloc_clusters_noref()

2014-04-30 14:46:13 +02:00

qcow2-snapshot.c

qcow2: Limit snapshot table size

2014-04-01 15:22:35 +02:00

qcow2.c

qcow2: Flush metadata during read-only reopen

2014-04-04 14:12:26 +02:00

qcow2.h

qcow2: Limit snapshot table size

2014-04-01 15:22:35 +02:00

qcow.c

Fixed various typos

2014-03-25 14:09:50 +01:00

qed-check.c

…

qed-cluster.c

…

qed-gencb.c

…

qed-l2-cache.c

…

qed-table.c

…

qed.c

convert fprintf() calls to error_setg() in block/qed.c:bdrv_qed_create()

2014-04-22 11:57:02 +02:00

qed.h

…

quorum.c

Use error_is_set() only when necessary (again)

2014-04-25 18:05:06 +02:00

raw_bsd.c

…

raw-aio.h

…

raw-posix.c

block: Unlink temporary files in raw-posix/win32

2014-04-30 11:05:00 +02:00

raw-win32.c

block: Unlink temporary files in raw-posix/win32

2014-04-30 11:05:00 +02:00

rbd.c

…

sheepdog.c

Fixed various typos

2014-03-25 14:09:50 +01:00

snapshot.c

…

ssh.c

…

stream.c

…

vdi.c

vdi: add bounds checks for blocks_in_image and disk_size header fields (CVE-2014-0144)

2014-04-01 14:06:31 +02:00

vhdx-endian.c

…

vhdx-log.c

Fixed various typos

2014-03-25 14:09:50 +01:00

vhdx.c

vhdx: Bounds checking for block_size and logical_sector_size (CVE-2014-0148)

2014-04-01 14:19:09 +02:00

vhdx.h

block: Explicitly specify 'unsigned long long' for VHDX 64-bit constants

2014-03-14 16:25:24 +01:00

vmdk.c

vmdk: Fix "%x" to PRIx32 in format strings for cid

2014-04-22 14:14:30 +02:00

vpc.c

vpc: Validate block size (CVE-2014-0142)

2014-04-01 13:59:47 +02:00

vvfat.c

block: Add errp to bdrv_new()

2014-04-22 12:00:20 +02:00

win32-aio.c

…