Anatol Belski 4294a4b862 block: qcow: Reject backing file name overlapping the header ...

The qcow2 spec requires the backing file name string to live in the
remaining space between the end of the header extension area and
the end of the first cluster. Header parsing accepted any backing
file offset above zero, including offsets pointing into the fixed
header fields themselves, so a corrupt or malicious image could
redirect the parser into reinterpreting header bytes as the backing
path.

Reject any backing_file_offset that is less than header.header_size
via a new BackingFileOverlapsHeader error. The check fires before
the existing first cluster bound, since an overlap is a different
class of corruption and deserves a distinct diagnostic.

Ref: #8261
Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>

2026-06-01 16:27:50 +00:00

..

src

block: qcow: Reject backing file name overlapping the header

2026-06-01 16:27:50 +00:00

Cargo.toml

block: fix cargo test -p block

2026-05-09 14:10:25 +00:00