diff options
| author | Vladimir Sementsov-Ogievskiy | 2019-02-27 14:14:30 +0100 |
|---|---|---|
| committer | Max Reitz | 2019-05-07 17:14:21 +0200 |
| commit | a5fff8d4b4d928311a5005efa12d0991fe3b66f9 (patch) | |
| tree | 23e9fcc05dc61c55bed7705ae09430959c692cd0 /include/exec/user | |
| parent | qcow2-refcount: fix check_oflag_copied (diff) | |
| download | qemu-a5fff8d4b4d928311a5005efa12d0991fe3b66f9.tar.gz qemu-a5fff8d4b4d928311a5005efa12d0991fe3b66f9.tar.xz qemu-a5fff8d4b4d928311a5005efa12d0991fe3b66f9.zip | |
qcow2-refcount: avoid eating RAM
qcow2_inc_refcounts_imrt() (through realloc_refcount_array()) can eat
an unpredictable amount of memory on corrupted table entries, which are
referencing regions far beyond the end of file.
Prevent this, by skipping such regions from further processing.
Interesting that iotest 138 checks exactly the behavior which we fix
here. So, change the test appropriately.
Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20190227131433.197063-3-vsementsov@virtuozzo.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
Diffstat (limited to 'include/exec/user')
0 files changed, 0 insertions, 0 deletions