Peter Wu f6e6652d7c block/dmg: validate chunk size to avoid overflow ...

Previously the chunk size was not checked, allowing for a large memory
allocation. This patch checks whether the chunks size is within the
resource fork length, and whether the resource fork is below the
trailer of the dmg file.

Signed-off-by: Peter Wu <peter@lekensteyn.nl>
Reviewed-by: John Snow <jsnow@redhat.com>
Message-id: 1420566495-13284-6-git-send-email-peter@lekensteyn.nl
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>

2015-02-06 17:24:21 +01:00

..

accounting.c

block: add accounting for merged requests

2015-02-06 17:24:21 +01:00

archipelago.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

backup.c

qmp: Add command 'blockdev-backup'

2015-01-13 11:47:56 +00:00

blkdebug.c

blkdebug: Simplify and improve filename generation

2014-12-10 10:31:11 +01:00

blkverify.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

block-backend.c

block-backend: expose bs->bl.max_transfer_length

2015-02-06 17:24:21 +01:00

bochs.c

…

cloop.c

…

commit.c

block: let commit blockjob run in BDS AioContext

2014-11-03 11:41:49 +00:00

curl.c

block/curl: Improve type safety of s->timeout.

2014-11-03 11:41:47 +00:00

dmg.c

block/dmg: validate chunk size to avoid overflow

2015-02-06 17:24:21 +01:00

gluster.c

…

iscsi.c

block/iscsi: fix uninitialized variable

2015-01-03 09:22:13 +01:00

linux-aio.c

linux-aio: simplify removal of completed iocbs from the list

2014-12-12 16:57:55 +00:00

Makefile.objs

block: add event when disk usage exceeds threshold

2015-02-06 17:24:21 +01:00

mirror.c

block: mirror - change string allocation to 2-bytes

2015-01-23 18:17:06 +01:00

nbd-client.c

…

nbd-client.h

…

nbd.c

nbd: Fix filename generation

2014-10-20 13:41:26 +02:00

nfs.c

block/nfs: Add create_opts

2014-12-10 10:31:19 +01:00

null.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

parallels.c

block/parallels: fix access to not initialized memory in catalog_bitmap

2014-11-03 09:48:41 +00:00

qapi.c

block: add event when disk usage exceeds threshold

2015-02-06 17:24:21 +01:00

qcow2-cache.c

…

qcow2-cluster.c

qcow2: Add two more unalignment checks

2015-01-23 18:17:05 +01:00

qcow2-refcount.c

block/qcow2: Make get_refcount() global

2014-11-03 11:41:49 +00:00

qcow2-snapshot.c

qcow2: Allow "full" discard

2014-11-03 11:41:47 +00:00

qcow2.c

block: update string sizes for filename,backing_file,exact_filename

2015-01-23 18:17:06 +01:00

qcow2.h

block/qcow2: Make get_refcount() global

2014-11-03 11:41:49 +00:00

qcow.c

block: update string sizes for filename,backing_file,exact_filename

2015-01-23 18:17:06 +01:00

qed-check.c

…

qed-cluster.c

…

qed-gencb.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

qed-l2-cache.c

…

qed-table.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

qed.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

qed.h

qed: Really remove unused field QEDAIOCB.finished

2015-02-06 17:24:21 +01:00

quorum.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

raw_bsd.c

block: Make essential BlockDriver objects public

2014-12-10 10:31:19 +01:00

raw-aio.h

linux-aio: drop return code from laio_io_unplug and ioq_submit

2014-12-12 16:57:55 +00:00

raw-posix.c

block: use fallocate(FALLOC_FL_PUNCH_HOLE) & fallocate(0) to write zeroes

2015-02-06 17:24:20 +01:00

raw-win32.c

block: Make essential BlockDriver objects public

2014-12-10 10:31:19 +01:00

rbd.c

block/rbd: fix memory leak

2014-12-12 13:16:56 +00:00

sheepdog.c

block: Rename BlockDriverAIOCB* to BlockAIOCB*

2014-10-20 13:41:27 +02:00

snapshot.c

snapshot: add bdrv_drain_all() to bdrv_snapshot_delete() to avoid concurrency problem

2014-11-03 09:48:42 +00:00

ssh.c

ssh: Don't crash if either host or path is not specified.

2014-10-03 10:30:33 +01:00

stream.c

block: let stream blockjob run in BDS AioContext

2014-11-03 11:41:49 +00:00

vdi.c

block: remove BLOCK_OPT_NOCOW from vdi_create_opts

2014-12-10 10:31:20 +01:00

vhdx-endian.c

…

vhdx-log.c

…

vhdx.c

block: vhdx - force FileOffsetMB field to '0' for certain block states

2015-01-23 12:41:32 -05:00

vhdx.h

block: vhdx - update PAYLOAD_BLOCK_UNMAPPED value to match 1.00 spec

2014-12-12 15:42:22 +00:00

vmdk.c

block: vmdk - move string allocations from stack to the heap

2015-01-23 18:17:05 +01:00

vpc.c

block: remove BLOCK_OPT_NOCOW from vpc_create_opts

2014-12-10 10:31:21 +01:00

vvfat.c

block: update string sizes for filename,backing_file,exact_filename

2015-01-23 18:17:06 +01:00

win32-aio.c

block: Rename BlockDriverCompletionFunc to BlockCompletionFunc

2014-10-20 13:41:27 +02:00

write-threshold.c

block: add event when disk usage exceeds threshold

2015-02-06 17:24:21 +01:00