qemu/tests/qemu-iotests/sample_images
Kevin Wolf afbcc40bee parallels: Fix catalog size integer overflow (CVE-2014-0143)
The first test case would cause a huge memory allocation, leading to a
qemu abort; the second one to a too small malloc() for the catalog
(smaller than s->catalog_size), which causes a read-only out-of-bounds
array access and on big endian hosts an endianess conversion for an
undefined memory area.

The sample image used here is not an original Parallels image. It was
created using an hexeditor on the basis of the struct that qemu uses.
Good enough for trying to crash the driver, but not for ensuring
compatibility.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2014-04-01 15:22:35 +02:00
..
README
empty.bochs.bz2 qemu-iotests: Support for bochs format 2014-04-01 13:59:47 +02:00
fake.parallels.bz2 parallels: Fix catalog size integer overflow (CVE-2014-0143) 2014-04-01 15:22:35 +02:00
iotest-dirtylog-10G-4M.vhdx.bz2 block: vhdx qemu-iotest - log replay of data sector 2013-11-07 13:58:59 +01:00
iotest-dynamic-1G.vhdx.bz2 block: qemu-iotests for vhdx, read sample dynamic image 2013-10-11 16:49:59 +02:00
iotest-version3.vmdk.bz2 qemu-iotests: Add sample image and test for VMDK version 3 2013-11-29 17:41:14 +01:00
simple-pattern.cloop.bz2 qemu-iotests: add cloop input validation tests 2014-04-01 13:59:46 +02:00

README

This is for small sample images to be used with qemu-iotests, intended for
non-native formats that QEMU supports for compatibility.  The idea is to use
the native tool to create the sample image.

For instance, a VHDX image in this directory would be an image created not by
QEMU itself, but rather created by Hyper-V.

Sample images added here must be compressed with bzip2.