tree 675dd5f26040c117c2f2fb040b5ea9dfb623ecf6
parent a1b3955c9415b1e767c130a2f59fee6aa28e575b
author Kevin Wolf <kwolf@redhat.com> 1395835543 +0100
committer Stefan Hajnoczi <stefanha@redhat.com> 1396354749 +0200

qcow2: Check refcount table size (CVE-2014-0144)

Limit the in-memory reference count table size to 8 MB, it's enough in
practice. This fixes an unbounded allocation as well as a buffer
overflow in qcow2_refcount_init().

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>