Re: [Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-26 Thread Daniel P. Berrange
On Tue, Feb 26, 2008 at 07:46:51PM +, Daniel P. Berrange wrote: > On Tue, Feb 19, 2008 at 04:39:07PM +, Ian Jackson wrote: > Content-Description: message body text > > I was doing some merging of qemu and I noticed that the block driver > > backends don't check the guest's read/write attemp

Re: [Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-26 Thread Daniel P. Berrange
On Tue, Feb 19, 2008 at 04:39:07PM +, Ian Jackson wrote: Content-Description: message body text > I was doing some merging of qemu and I noticed that the block driver > backends don't check the guest's read/write attempts against the > nominal size of the block device. > > I haven't checked al

[Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-19 Thread Ian Jackson
I was doing some merging of qemu and I noticed that the block driver backends don't check the guest's read/write attempts against the nominal size of the block device. I haven't checked all of the backends but I have verified the bug with block-cow.c, which I have in my test induced to set a bitma