Changeset 63636 in vbox

Timestamp:

Aug 25, 2016 2:09:21 PM (8 years ago)

Author:

vboxsync

Message:

Storage/QED: Check that the filename size for the backing file is in bounds if the feature flag is set

File:

• trunk/src/VBox/Storage/QED.cpp (modified) (1 diff)

trunk/src/VBox/Storage/QED.cpp

@@ -302 +302 @@
         return false;
     if (RT_UNLIKELY(pHeader->u64Size % 512 != 0))
+        return false;
+    if (RT_UNLIKELY(   pHeader->u64FeatureFlags & QED_FEATURE_BACKING_FILE
+                    && (   pHeader->u32BackingFilenameSize == 0
+                        || pHeader->u32BackingFilenameSize == UINT32_MAX)))
         return false;