Re: [Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-26 Thread Daniel P. Berrange
On Tue, Feb 19, 2008 at 04:39:07PM +, Ian Jackson wrote: Content-Description: message body text I was doing some merging of qemu and I noticed that the block driver backends don't check the guest's read/write attempts against the nominal size of the block device. I haven't checked all of

Re: [Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-26 Thread Daniel P. Berrange
On Tue, Feb 26, 2008 at 07:46:51PM +, Daniel P. Berrange wrote: On Tue, Feb 19, 2008 at 04:39:07PM +, Ian Jackson wrote: Content-Description: message body text I was doing some merging of qemu and I noticed that the block driver backends don't check the guest's read/write attempts

[Qemu-devel] Re: qemu unchecked block read/write vulnerability

2008-02-19 Thread Ian Jackson
I was doing some merging of qemu and I noticed that the block driver backends don't check the guest's read/write attempts against the nominal size of the block device. I haven't checked all of the backends but I have verified the bug with block-cow.c, which I have in my test induced to set a