Stefan Hajnoczi
f56b9bc3ae
block/cloop: refuse images with bogus offsets (CVE-2014-0144)
...
The offsets[] array allows efficient seeking and tells us the maximum
compressed data size. If the offsets are bogus the maximum compressed
data size will be unrealistic.
This could cause g_malloc() to abort and bogus offsets mean the image is
broken anyway. Therefore we should refuse such images.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2014-04-01 13:59:47 +02:00
..
2014-04-01 13:59:46 +02:00
2013-10-01 16:06:07 +04:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2013-04-15 08:26:18 +02:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2014-02-14 18:05:39 +01:00
2012-04-19 15:48:52 +02:00
2012-02-23 10:29:46 +01:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:15:22 +01:00
2013-09-27 11:10:45 +02:00
2012-05-10 10:32:12 +02:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2013-09-27 11:10:45 +02:00
2012-04-19 15:48:52 +02:00
2014-02-09 09:12:38 +01:00
2012-05-10 10:32:12 +02:00
2014-01-22 12:07:16 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2013-09-27 11:10:45 +02:00
2012-02-22 16:17:02 +01:00
2012-02-23 10:29:46 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-10-07 13:23:19 +02:00
2013-10-07 13:23:19 +02:00
2013-09-27 11:10:45 +02:00
2012-05-10 10:32:12 +02:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2013-09-27 11:10:45 +02:00
2012-04-19 15:48:52 +02:00
2013-11-29 13:40:37 +01:00
2012-09-28 19:40:56 +02:00
2014-02-09 09:12:38 +01:00
2013-08-30 15:48:43 +02:00
2013-09-27 11:10:45 +02:00
2013-11-29 17:41:13 +01:00
2013-09-27 11:10:45 +02:00
2012-05-10 10:32:12 +02:00
2014-02-09 09:12:38 +01:00
2012-04-20 15:57:30 +02:00
2013-09-27 11:10:45 +02:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-08-30 15:48:43 +02:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-11-29 17:41:13 +01:00
2014-02-09 09:12:38 +01:00
2013-09-06 15:25:07 +02:00
2014-01-31 22:05:03 +01:00
2012-10-24 10:26:19 +02:00
2013-11-27 07:53:32 -08:00
2013-11-27 07:53:32 -08:00
2013-09-27 11:10:45 +02:00
2012-10-24 10:26:18 +02:00
2014-02-09 09:12:38 +01:00
2012-10-24 10:26:19 +02:00
2012-11-14 18:19:21 +01:00
2013-03-28 11:52:44 +01:00
2013-09-12 10:12:47 +02:00
2013-09-12 10:12:47 +02:00
2014-02-21 21:02:21 +01:00
2013-11-29 17:41:13 +01:00
2013-09-27 11:10:45 +02:00
2013-11-29 17:41:13 +01:00
2013-12-04 14:31:39 +01:00
2013-12-04 14:31:39 +01:00
2013-09-27 11:10:45 +02:00
2013-09-12 10:12:48 +02:00
2013-09-27 11:10:45 +02:00
2013-03-15 16:07:51 +01:00
2014-03-06 17:29:24 +01:00
2014-03-06 17:29:24 +01:00
2014-02-09 09:12:38 +01:00
2013-03-19 11:48:37 +01:00
2013-09-27 11:10:45 +02:00
2013-04-22 11:37:12 +02:00
2014-02-09 09:12:38 +01:00
2013-09-12 10:12:48 +02:00
2013-11-29 13:40:37 +01:00
2013-07-26 22:01:31 +02:00
2013-07-26 22:01:31 +02:00
2013-07-26 22:01:31 +02:00
2013-09-12 10:12:47 +02:00
2013-09-12 10:12:47 +02:00
2013-12-04 15:19:00 +01:00
2013-12-04 15:19:00 +01:00
2014-02-09 09:12:38 +01:00
2014-02-21 21:02:24 +01:00
2014-03-13 14:23:27 +01:00
2014-03-13 14:23:27 +01:00
2014-02-09 09:12:38 +01:00
2013-09-27 11:16:36 +02:00
2013-08-30 15:28:52 +02:00
2013-08-30 15:28:52 +02:00
2014-02-09 09:12:38 +01:00
2013-09-06 15:25:07 +02:00
2013-11-07 13:58:59 +01:00
2013-11-07 13:58:59 +01:00
2013-10-11 16:49:50 +02:00
2013-10-11 16:49:50 +02:00
2013-10-11 16:49:59 +02:00
2013-10-11 16:49:59 +02:00
2013-11-07 13:53:30 +01:00
2013-11-07 13:53:30 +01:00
2013-10-25 11:08:20 +02:00
2013-10-25 11:08:20 +02:00
2014-02-09 09:12:38 +01:00
2013-11-14 13:09:06 +01:00
2014-02-14 18:05:39 +01:00
2014-02-14 18:05:39 +01:00
2014-02-09 09:12:38 +01:00
2014-01-22 12:07:18 +01:00
2014-02-09 09:12:38 +01:00
2014-01-22 12:07:18 +01:00
2013-11-15 13:37:43 +01:00
2013-11-15 13:37:43 +01:00
2013-12-04 14:31:39 +01:00
2013-12-04 14:31:39 +01:00
2014-04-01 13:59:47 +02:00
2014-04-01 13:59:47 +02:00
2014-02-09 09:12:38 +01:00
2014-01-24 17:40:25 +01:00
2014-02-09 09:12:39 +01:00
2014-02-09 09:12:39 +01:00
2014-02-28 18:59:07 +01:00
2014-02-28 18:59:06 +01:00
2014-02-21 22:10:31 +01:00
2014-02-21 22:10:31 +01:00
2014-03-14 16:29:02 +01:00
2014-03-14 16:29:02 +01:00
2014-03-07 11:36:12 +01:00
2014-03-07 11:36:12 +01:00
2014-03-05 15:58:32 +01:00
2014-03-05 15:58:32 +01:00
2014-03-14 16:24:42 +01:00
2014-03-14 16:24:42 +01:00
2013-12-04 15:19:00 +01:00
2014-04-01 13:59:46 +02:00
2013-09-27 10:59:07 +02:00
2013-12-06 16:53:51 +01:00
2013-11-07 13:53:31 +01:00
2014-04-01 13:59:46 +02:00
2012-02-22 16:15:22 +01:00
2014-04-01 13:59:46 +02:00
2013-12-04 11:55:13 +01:00
2012-02-22 16:15:22 +01:00
2014-03-14 16:28:28 +01:00
2013-05-24 16:17:55 +02:00
2012-08-06 22:39:14 +02:00
2012-02-23 10:29:46 +01:00
2013-09-12 10:12:46 +02:00