summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2014-07-03dmg: sanitize chunk length and sectorcount (CVE-2014-0145)Stefan Hajnoczi1-0/+24
2014-07-03dmg: use appropriate types when reading chunksStefan Hajnoczi1-1/+2
2014-07-03dmg: drop broken bdrv_pread() loopStefan Hajnoczi1-13/+2
2014-07-03dmg: prevent out-of-bounds array access on terminatorStefan Hajnoczi1-1/+1
2014-07-03dmg: coding style and indentation cleanupStefan Hajnoczi1-104/+120
2014-07-03qcow2: Fix new L1 table size check (CVE-2014-0143)Kevin Wolf1-1/+1
2014-07-03qcow2: Protect against some integer overflows in bdrv_checkKevin Wolf1-9/+9
2014-07-03qcow2: Fix types in qcow2_alloc_clusters and alloc_clusters_norefKevin Wolf2-8/+9
2014-07-03qcow2: Check new refcount table size on growthKevin Wolf3-3/+14
2014-07-03qcow2: Avoid integer overflow in get_refcount (CVE-2014-0143)Kevin Wolf1-1/+1
2014-07-03qcow2: Don't rely on free_cluster_index in alloc_refcount_block() (CVE-2014-0...Kevin Wolf6-44/+65
2014-07-03qcow2: Zero-initialise first cluster for new imagesKevin Wolf1-16/+20
2014-07-03qcow2: fix offset overflow in qcow2_alloc_clusters_at()Hu Tao1-1/+7
2014-07-03qcow2: Fix backing file name length checkKevin Wolf3-3/+19
2014-07-03qcow2: Validate active L1 table offset and size (CVE-2014-0144)Kevin Wolf3-0/+45
2014-07-03qcow2: Validate snapshot table offset/size (CVE-2014-0144)Kevin Wolf5-26/+91
2014-07-03qcow2: Validate refcount table offsetKevin Wolf3-0/+56
2014-07-03qcow2: Check refcount table size (CVE-2014-0144)Kevin Wolf4-1/+29
2014-07-03qcow2: Check backing_file_offset (CVE-2014-0144)Kevin Wolf3-0/+25
2014-07-03qcow2: Check header_length (CVE-2014-0144)Kevin Wolf4-9/+96
2014-07-03curl: check data size before memcpy to local buffer. (CVE-2014-0144)Fam Zheng1-0/+5
2014-07-03vhdx: Bounds checking for block_size and logical_sector_size (CVE-2014-0148)Jeff Cody1-2/+10
2014-07-03vdi: add bounds checks for blocks_in_image and disk_size header fields (CVE-2...Jeff Cody1-2/+29
2014-07-03vpc: Validate block size (CVE-2014-0142)Kevin Wolf4-0/+87
2014-07-03vpc/vhd: add bounds check for max_table_entries and block_size (CVE-2014-0144)Jeff Cody1-4/+23
2014-07-03bochs: Fix bitmap offset calculationKevin Wolf1-2/+3
2014-07-03bochs: Check extent_size header field (CVE-2014-0142)Kevin Wolf3-0/+29
2014-07-03bochs: Check catalog_size header field (CVE-2014-0143)Kevin Wolf3-1/+35
2014-07-03bochs: Use unsigned variables for offsets and sizes (CVE-2014-0147)Kevin Wolf3-8/+20
2014-07-03bochs: Unify header structs and make them QEMU_PACKEDKevin Wolf1-42/+25
2014-07-03qemu-iotests: Support for bochs formatKevin Wolf5-0/+67
2014-07-03block/cloop: fix offsets[] size off-by-oneStefan Hajnoczi3-7/+14
2014-07-03block/cloop: refuse images with bogus offsets (CVE-2014-0144)Stefan Hajnoczi3-5/+52
2014-07-03block/cloop: refuse images with huge offsets arrays (CVE-2014-0144)Stefan Hajnoczi3-0/+19
2014-07-03block/cloop: prevent offsets_size integer overflow (CVE-2014-0143)Stefan Hajnoczi3-0/+18
2014-07-03block/cloop: validate block_size header field (CVE-2014-0144)Stefan Hajnoczi3-0/+55
2014-07-03qemu-iotests: add cloop input validation testsStefan Hajnoczi4-0/+60
2014-07-03qemu-iotests: add ./check -cloop supportStefan Hajnoczi2-0/+10
2014-07-01migration: catch unknown flags in ram_loadPeter Lieven2-16/+18
2014-07-01migration: remove duplicate codeChenLiang1-35/+33
2014-07-01virtio: allow mapping up to max queue sizeMichael S. Tsirkin1-1/+1
2014-07-01pci-assign: limit # of msix vectorsMichael S. Tsirkin1-6/+6
2014-06-29spapr_pci: Fix number of returned vectors in ibm, change-msiAlexey Kardashevskiy1-0/+16
2014-06-26linux-user/elfload.c: Fix A64 code which was incorrectly acting like A32Peter Maydell1-11/+73
2014-06-26linux-user/elfload.c: Update ARM HWCAP bitsPeter Maydell1-2/+20
2014-06-26linux-user/elfload.c: Fix incorrect ARM HWCAP bitsPeter Maydell1-4/+5
2014-06-26target-arm: Make vbar_write 64bit friendly on 32bit hostsEdgar E. Iglesias1-1/+1
2014-06-26target-i386: fix set of registers zeroed on resetPaolo Bonzini2-2/+4
2014-06-26stellaris_enet: block migrationMichael S. Tsirkin1-1/+10
2014-06-26virtio: validate config_len on loadMichael S. Tsirkin1-1/+7