From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:45716) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ar78n-0003jf-Gw for qemu-devel@nongnu.org; Fri, 15 Apr 2016 13:02:46 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ar78m-0003jw-NT for qemu-devel@nongnu.org; Fri, 15 Apr 2016 13:02:45 -0400 From: Kevin Wolf Date: Fri, 15 Apr 2016 19:02:10 +0200 Message-Id: <1460739742-5315-8-git-send-email-kwolf@redhat.com> In-Reply-To: <1460739742-5315-1-git-send-email-kwolf@redhat.com> References: <1460739742-5315-1-git-send-email-kwolf@redhat.com> Subject: [Qemu-devel] [PULL 07/19] block/vpc: make checks on max table size a bit more lax List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-block@nongnu.org Cc: kwolf@redhat.com, qemu-devel@nongnu.org From: Jeff Cody The check on the max_table_size field not being larger than required is valid, and in accordance with the VHD spec. However, there have been VHD images encountered in the wild that have an out-of-spec max table size that is technically too large. There is no issue in allowing this larger table size, as we also later verify that the computed size (used for the pagetable) is large enough to fit all sectors. In addition, max_table_entries is bounds checked against SIZE_MAX and INT_MAX. Remove the strict check, so that we can accomodate these sorts of images that are benignly out of spec. Reported-by: Stefan Hajnoczi Reported-by: Grant Wu Signed-off-by: Jeff Cody Reviewed-by: Stefan Hajnoczi Signed-off-by: Kevin Wolf --- block/vpc.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/block/vpc.c b/block/vpc.c index 03aee81..0eef099 100644 --- a/block/vpc.c +++ b/block/vpc.c @@ -351,10 +351,6 @@ static int vpc_open(BlockDriverState *bs, QDict *options, int flags, ret = -EINVAL; goto fail; } - if (s->max_table_entries > (VHD_MAX_SECTORS * 512) / s->block_size) { - ret = -EINVAL; - goto fail; - } computed_size = (uint64_t) s->max_table_entries * s->block_size; if (computed_size < bs->total_sectors * 512) { -- 1.8.3.1