]> git.ipfire.org Git - thirdparty/qemu.git/commit
qemu-img: fix offset calculation in bench
authorDenis Rastyogin <gerben@altlinux.org>
Tue, 6 May 2025 14:13:37 +0000 (17:13 +0300)
committerKevin Wolf <kwolf@redhat.com>
Thu, 22 May 2025 14:54:05 +0000 (16:54 +0200)
commitff2ab634e4bb3bddcf5f5ee29e0b46f71e3f4b54
tree1ba05898a8990838f1c9f926ede7406afa95dd70
parent5562e214e82ae4bcb0b642cc52b304bdc78a58c3
qemu-img: fix offset calculation in bench

This error was discovered by fuzzing qemu-img.

The current offset calculation leads to an EIO error
in block/block-backend.c: blk_check_byte_request():

 if (offset > len || len - offset < bytes) {
     return -EIO;
 }

This triggers the error message:
"qemu-img: Failed request: Input/output error".

Example of the issue:
 offset: 260076
 len: 260096
 bytes: 4096

This fix ensures that offset remains within a valid range.

Signed-off-by: Denis Rastyogin <gerben@altlinux.org>
Message-ID: <20250506141410.100119-1-gerben@altlinux.org>
[kwolf: Fixed up integer overflow]
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
qemu-img.c