diff options
| author | Peter Wu <peter@lekensteyn.nl> | 2015-01-06 18:48:08 +0100 |
|---|---|---|
| committer | Kevin Wolf <kwolf@redhat.com> | 2015-02-06 17:24:21 +0100 |
| commit | f6e6652d7c9251236fc1ecc6cece36104c7af15b (patch) | |
| tree | 7d369a8801a35d11b5e3e73a93d92c1354a7bd14 /scripts/qapi-commands.py | |
| parent | 7aee37b93a4f694cdd670807f30b8efd33d0c721 (diff) | |
| download | focaccia-qemu-f6e6652d7c9251236fc1ecc6cece36104c7af15b.tar.gz focaccia-qemu-f6e6652d7c9251236fc1ecc6cece36104c7af15b.zip | |
block/dmg: validate chunk size to avoid overflow
Previously the chunk size was not checked, allowing for a large memory allocation. This patch checks whether the chunks size is within the resource fork length, and whether the resource fork is below the trailer of the dmg file. Signed-off-by: Peter Wu <peter@lekensteyn.nl> Reviewed-by: John Snow <jsnow@redhat.com> Message-id: 1420566495-13284-6-git-send-email-peter@lekensteyn.nl Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Diffstat (limited to 'scripts/qapi-commands.py')
0 files changed, 0 insertions, 0 deletions