Fix CVE-2008-0928 - insufficient block device address range checking
commit70a07a8192f0ca08c3855ebd66efe69fb2e8aaf1
authoraurel32 <aurel32>
Tue, 11 Mar 2008 17:17:58 +0000 (11 17:17 +0000)
committeraurel32 <aurel32>
Tue, 11 Mar 2008 17:17:58 +0000 (11 17:17 +0000)
tree88c3355a4eaf8533669c87a6dab7c8a4afcd8557
parent59596dd336a30bb8ac2d79ccb6f147614b10feba
Fix CVE-2008-0928 - insufficient block device address range checking

Qemu 0.9.1 and earlier does not perform range checks for block device
read or write requests, which allows guest host users with root
privileges to access arbitrary memory and escape the virtual machine.
block-qcow.c
block-qcow2.c
block-vmdk.c
block.c
block.h
block_int.h