Stefan Hajnoczi d65f97a82c block/cloop: validate block_size header field (CVE-2014-0144) ...

Avoid unbounded s->uncompressed_block memory allocation by checking that
the block_size header field has a reasonable value.  Also enforce the
assumption that the value is a non-zero multiple of 512.

These constraints conform to cloop 2.639's code so we accept existing
image files.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>

2014-04-01 13:59:47 +02:00

..

acpi-test-data

Revert "acpi-test: rebuild SSDT"

2014-03-26 12:42:31 +02:00

libqos

tests/libqos/pci-pc: Avoid shifting left into sign bit

2014-03-27 19:22:49 +04:00

multiboot

tests: Multiboot mmap test case

2013-10-28 17:34:42 +01:00

qapi-schema

qapi script: do not allow string discriminator

2014-03-11 09:07:42 -04:00

qemu-iotests

block/cloop: validate block_size header field (CVE-2014-0144)

2014-04-01 13:59:47 +02:00

tcg

tests: Fix 'make test' for i686 hosts (build regression)

2014-03-15 13:54:18 +04:00

.gitignore

tests/.gitignore: Ignore tests/check-qom-interface

2014-02-01 13:56:31 +04:00

acpi-test.c

tests/acpi-test: do not fail if iasl is broken

2014-03-24 12:37:36 +02:00

blockdev-test.c

blockdev-test: add test case for drive_add duplicate IDs

2013-11-07 13:58:58 +01:00

boot-order-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

check-block.sh

…

check-qdict.c

check-qdict: Test termination of qdict_array_split()

2014-02-21 22:18:26 +01:00

check-qfloat.c

…

check-qint.c

…

check-qjson.c

…

check-qlist.c

…

check-qom-interface.c

tests: Test QOM interface casting

2013-12-24 17:27:17 +01:00

check-qstring.c

…

e1000-test.c

tests: Add e1000 qtest

2014-02-14 16:22:33 +01:00

eepro100-test.c

tests: Add eepro100 qtest

2014-02-14 16:22:33 +01:00

endianness-test.c

qtest: Include system headers before user headers

2014-02-17 23:10:02 +01:00

fdc-test.c

qtest: Fix the bug about disable vnc causes "make check" fail

2014-01-22 12:07:16 +01:00

fw_cfg-test.c

qtest: Include system headers before user headers

2014-02-17 23:10:02 +01:00

hd-geo-test.c

qtest: Use -display none by default

2013-11-19 10:28:14 +01:00

i440fx-test.c

QOM infrastructure fixes and device conversions

2014-02-20 13:05:48 +00:00

ide-test.c

qtest: Fix the bug about disable vnc causes "make check" fail

2014-01-22 12:07:16 +01:00

ipoctal232-test.c

tests: Add ipoctal232 qtest

2014-02-14 21:07:13 +01:00

libqtest.c

qtest: Fix crash if SIGABRT during qtest_init()

2014-03-13 21:12:07 +01:00

libqtest.h

qtest: Fix crash if SIGABRT during qtest_init()

2014-03-13 21:12:07 +01:00

m48t59-test.c

qtest: Include system headers before user headers

2014-02-17 23:10:02 +01:00

Makefile

qdev: Introduce FWPathProvider interface

2014-03-20 02:40:13 +01:00

ne2000-test.c

tests: Add ne2000 qtest

2014-02-14 20:50:19 +01:00

pcnet-test.c

tests: Add pcnet qtest

2014-02-14 16:22:33 +01:00

qdev-monitor-test.c

qdev-monitor-test: Don't test human-readable error message

2014-03-12 20:13:02 +01:00

qemu-iotests-quick.sh

qemu-iotests: add more tests to the "quick" group

2014-02-28 18:59:06 +01:00

qom-test.c

qom-test: Test QOM properties

2014-03-13 01:21:45 +01:00

rtc-test.c

qtest: Include system headers before user headers

2014-02-17 23:10:02 +01:00

rtl8139-test.c

tests: Add rtl8139 qtest

2014-02-14 16:22:33 +01:00

spapr-phb-test.c

tests: Add spapr-pci-host-bridge qtest

2014-03-13 01:21:57 +01:00

test-aio.c

aio: add aio_context_acquire() and aio_context_release()

2014-03-13 14:42:24 +01:00

test-bitops.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-coroutine.c

Test coroutine execution order

2013-11-28 10:30:52 +01:00

test-cutils.c

…

test-hbitmap.c

…

test-int128.c

tests/test-int128: Don't use __noclone__ attribute on clang

2014-03-02 17:20:37 +04:00

test-iov.c

…

test-mul64.c

…

test-opts-visitor.c

tests: fix 64-bit int literals for 32-bit hosts

2013-11-05 19:59:43 -08:00

test-qdev-global-props.c

qdev: Set globals in instance_post_init function

2013-08-16 18:44:33 +02:00

test-qmp-commands.c

tests: test-qmp-commands: Fix double free

2014-03-11 09:07:42 -04:00

test-qmp-input-strict.c

qapi script: do not allow string discriminator

2014-03-11 09:07:42 -04:00

test-qmp-input-visitor.c

qapi script: do not allow string discriminator

2014-03-11 09:07:42 -04:00

test-qmp-output-visitor.c

qapi script: do not allow string discriminator

2014-03-11 09:07:42 -04:00

test-rfifolock.c

rfifolock: add recursive FIFO lock

2014-03-13 14:42:21 +01:00

test-string-input-visitor.c

Use error_is_set() only when necessary

2014-02-17 11:57:23 -05:00

test-string-output-visitor.c

QOM infrastructure fixes and device conversions

2014-02-20 13:05:48 +00:00

test-thread-pool.c

aio / timers: Add QEMUTimerListGroup to AioContext

2013-08-22 19:10:27 +02:00

test-throttle.c

misc: New spelling fixes in comments

2013-10-26 13:01:57 +04:00

test-visitor-serialization.c

tests/qapi-schema: Cover complex types with base

2014-03-03 11:16:45 -05:00

test-vmstate.c

tests: Some unit tests for vmstate.c

2014-01-13 14:04:53 +01:00

test-x86-cpuid.c

…

test-xbzrle.c

…

tmp105-test.c

qtest: Include system headers before user headers

2014-02-17 23:10:02 +01:00

tpci200-test.c

tests: Add tpci200 qtest

2014-02-14 21:02:27 +01:00

virtio-balloon-test.c

tests: Add virtio-balloon qtest

2014-03-13 01:21:56 +01:00

virtio-blk-test.c

tests: Add virtio-blk qtest

2014-03-13 01:21:56 +01:00

virtio-console-test.c

virtio-console-test: Test virtserialport as well

2014-03-13 21:12:07 +01:00

virtio-net-test.c

tests: Add virtio-net qtest

2014-02-14 21:01:03 +01:00

virtio-rng-test.c

tests: Add virtio-rng qtest

2014-03-13 01:21:56 +01:00

virtio-scsi-test.c

tests: Add virtio-scsi qtest

2014-03-13 01:21:56 +01:00

virtio-serial-test.c

tests: Add virtio-serial qtest

2014-03-13 01:21:57 +01:00

vmxnet3-test.c

tests: Add vmxnet3 qtest

2014-02-14 16:22:33 +01:00