]> xenbits.xensource.com Git - qemu-xen-4.6-testing.git/commit
projects / qemu-xen-4.6-testing.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b94ed57) | patch
Fix CVE-2008-0928 - insufficient block device address range checking
authoraurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162>
Tue, 11 Mar 2008 17:17:59 +0000 (17:17 +0000)
committeraurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162>
Tue, 11 Mar 2008 17:17:59 +0000 (17:17 +0000)
commit902b27d0b8d5bfa840eaf389d7cbcc28b57e3fbe
tree88c3355a4eaf8533669c87a6dab7c8a4afcd8557tree
parentb94ed5772eb31e8fad4b823351e8152839bf722acommit | diff
Fix CVE-2008-0928 - insufficient block device address range checking

Qemu 0.9.1 and earlier does not perform range checks for block device
read or write requests, which allows guest host users with root
privileges to access arbitrary memory and escape the virtual machine.

git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@4037 c046a42c-6fe2-441c-8c8c-71466251a162
block-qcow.c diff | blob | history
block-qcow2.c diff | blob | history
block-vmdk.c diff | blob | history
block.c diff | blob | history
block.h diff | blob | history
block_int.h diff | blob | history
Unnamed repository; edit this file to name it for gitweb.