Kevin Wolf 715c3f60ef bochs: Fix catalog size check ...

The old check was off by a factor of 512 and didn't consider cases where
we don't get an exact division. This could lead to an out-of-bounds
array access in seek_to_sector().

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>

2014-04-11 13:59:49 +02:00

..

backup.c

…

blkdebug.c

…

blkverify.c

…

bochs.c

bochs: Fix catalog size check

2014-04-11 13:59:49 +02:00

cloop.c

block/cloop: fix offsets[] size off-by-one

2014-04-01 13:59:47 +02:00

commit.c

…

cow.c

…

curl.c

curl: check data size before memcpy to local buffer. (CVE-2014-0144)

2014-04-01 14:19:09 +02:00

dmg.c

dmg: prevent chunk buffer overflow (CVE-2014-0145)

2014-04-01 15:22:35 +02:00

gluster.c

Fixed various typos

2014-03-25 14:09:50 +01:00

iscsi.c

iscsi: Don't set error if already set in iscsi_do_inquiry

2014-04-04 14:11:34 +02:00

linux-aio.c

…

Makefile.objs

…

mirror.c

mirror: fix early wake from sleep due to aio

2014-03-25 14:09:50 +01:00

nbd-client.c

nbd: close socket if connection breaks

2014-03-14 16:28:28 +01:00

nbd-client.h

…

nbd.c

…

nfs.c

block/nfs: report errors from libnfs

2014-03-19 09:39:41 +01:00

parallels.c

parallels: Sanity check for s->tracks (CVE-2014-0142)

2014-04-01 15:22:35 +02:00

qapi.c

…

qcow2-cache.c

…

qcow2-cluster.c

qcow2: Put cache reference in error case

2014-04-04 17:10:08 +02:00

qcow2-refcount.c

qcow2: Protect against some integer overflows in bdrv_check

2014-04-01 15:22:35 +02:00

qcow2-snapshot.c

qcow2: Limit snapshot table size

2014-04-01 15:22:35 +02:00

qcow2.c

qcow2: Flush metadata during read-only reopen

2014-04-04 14:12:26 +02:00

qcow2.h

qcow2: Limit snapshot table size

2014-04-01 15:22:35 +02:00

qcow.c

Fixed various typos

2014-03-25 14:09:50 +01:00

qed-check.c

…

qed-cluster.c

…

qed-gencb.c

…

qed-l2-cache.c

…

qed-table.c

…

qed.c

block: Add error handling to bdrv_invalidate_cache()

2014-03-19 09:39:41 +01:00

qed.h

…

quorum.c

block: Add error handling to bdrv_invalidate_cache()

2014-03-19 09:39:41 +01:00

raw_bsd.c

…

raw-aio.h

…

raw-posix.c

…

raw-win32.c

block/raw-win32: bdrv_parse_filename() for hdev

2014-03-13 14:42:25 +01:00

rbd.c

…

sheepdog.c

Fixed various typos

2014-03-25 14:09:50 +01:00

snapshot.c

…

ssh.c

…

stream.c

…

vdi.c

vdi: add bounds checks for blocks_in_image and disk_size header fields (CVE-2014-0144)

2014-04-01 14:06:31 +02:00

vhdx-endian.c

…

vhdx-log.c

Fixed various typos

2014-03-25 14:09:50 +01:00

vhdx.c

vhdx: Bounds checking for block_size and logical_sector_size (CVE-2014-0148)

2014-04-01 14:19:09 +02:00

vhdx.h

block: Explicitly specify 'unsigned long long' for VHDX 64-bit constants

2014-03-14 16:25:24 +01:00

vmdk.c

…

vpc.c

vpc: Validate block size (CVE-2014-0142)

2014-04-01 13:59:47 +02:00

vvfat.c

vvfat: Fix :floppy: option to suppress partition table

2014-04-01 13:49:53 +02:00

win32-aio.c

…