| commit | a1391444fe1cfef14976458f3293a2c6945e725c | |
| author | Max Reitz <mreitz@redhat.com> | |
| Thu, 16 Oct 2014 13:25:56 +0000 (16 15:25 +0200) | ||
| committer | Kevin Wolf <kwolf@redhat.com> | |
| Thu, 23 Oct 2014 13:34:02 +0000 (23 15:34 +0200) | ||
| tree | a66c7c2da73dbf2ef603487f5cf79240ad2ac9d3 | treesnapshot (tar.gz zip) |
| parent | 925bb3238d498172e8ee9a57842320b1d1bfc3a5 | commitdiff |
qcow2: Do not overflow when writing an L1 sector
While writing an L1 table sector, qcow2_write_l1_entry() copies the
respective range from s->l1_table to the local "buf" array. The size of
s->l1_table does not have to be a multiple of L1_ENTRIES_PER_SECTOR;
thus, limit the index which is used for copying all entries to the L1
size.
Cc: qemu-stable@nongnu.org
Signed-off-by: Max Reitz <mreitz@redhat.com>
Reviewed-by: Peter Lieven <pl@kamp.de>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
While writing an L1 table sector, qcow2_write_l1_entry() copies the
respective range from s->l1_table to the local "buf" array. The size of
s->l1_table does not have to be a multiple of L1_ENTRIES_PER_SECTOR;
thus, limit the index which is used for copying all entries to the L1
size.
Cc: qemu-stable@nongnu.org
Signed-off-by: Max Reitz <mreitz@redhat.com>
Reviewed-by: Peter Lieven <pl@kamp.de>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
| block/qcow2-cluster.c | diffblobblamehistory |