The call to bdrv_getlength() from qcow2_check_refcounts() may result in an error. Check this and abort if necessary.
Signed-off-by: Max Reitz <[email protected]> --- block/qcow2-refcount.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/block/qcow2-refcount.c b/block/qcow2-refcount.c index e6fc30e..76da3ab 100644 --- a/block/qcow2-refcount.c +++ b/block/qcow2-refcount.c @@ -1487,6 +1487,11 @@ int qcow2_check_refcounts(BlockDriverState *bs, BdrvCheckResult *res, int ret; size = bdrv_getlength(bs->file); + if (size < 0) { + res->check_errors++; + return size; + } + nb_clusters = size_to_clusters(s, size); if (nb_clusters > INT_MAX) { res->check_errors++; -- 1.9.2
