Re: [PATCH 00/11] Fix qemu_strtosz() read-out-of-bounds

2023-05-09 Thread Hanna Czenczek
On 08.05.23 22:03, Eric Blake wrote: This series blew up in my face when Hanna first pointed me to https://gitlab.com/qemu-project/qemu/-/issues/1629 Basically, 'qemu-img dd bs=9.9e999' killed a sanitized build because of a read-out-of-bounds (".9e999" parses as infinity, but qemu_strtosz wasn't

[PATCH 00/11] Fix qemu_strtosz() read-out-of-bounds

2023-05-08 Thread Eric Blake
This series blew up in my face when Hanna first pointed me to https://gitlab.com/qemu-project/qemu/-/issues/1629 Basically, 'qemu-img dd bs=9.9e999' killed a sanitized build because of a read-out-of-bounds (".9e999" parses as infinity, but qemu_strtosz wasn't expecting ERANGE failure). The overal