Anatol Belski 4a2a9390be block: qcow: Reject backing file name outside first cluster ...

The qcow2 spec requires the backing file name string to live
entirely within the first cluster, between the end of the header
extension area and the cluster boundary. The parser previously
only validated the 1023 byte cap on the name length and accepted
any backing_file_offset, so a corrupt or malicious image could
place the name string anywhere in the file.

Add the cluster bound check in QcowHeader::new and report it via
a new BackingFileOutsideFirstCluster error.

Fixes: #8261

Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>

2026-06-01 16:27:50 +00:00

..

src

block: qcow: Reject backing file name outside first cluster

2026-06-01 16:27:50 +00:00

Cargo.toml

block: fix cargo test -p block

2026-05-09 14:10:25 +00:00