]> git.ipfire.org Git - thirdparty/qemu.git/commit
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6b94cfe) | patch
bochs: Check extent_size header field (CVE-2014-0142)
authorKevin Wolf <kwolf@redhat.com>
Wed, 26 Mar 2014 12:05:34 +0000 (13:05 +0100)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Thu, 3 Jul 2014 21:18:11 +0000 (16:18 -0500)
commitb0a7517c244d09bbb087af0f8b455cabedc126ee
treed2ac81d200b2a47a7e5b0bf966b58c9fa96bfc20tree
parent6b94cfeca8f9727ae6de41f2b53f1f906620c49acommit | diff
bochs: Check extent_size header field (CVE-2014-0142)

This fixes two possible division by zero crashes: In bochs_open() and in
seek_to_sector().

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit 8e53abbc20d08ae3ec30c2054e1161314ad9501d)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
block/bochs.c diff | blob | blame | history
tests/qemu-iotests/078 diff | blob | blame | history
tests/qemu-iotests/078.out diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git