On 25/7/26 09:13, Akihiko Odaki wrote:
The blob size is encoded as a 64-bit integer in the virtio protocol, but
it is encoded as a 32-bit integer in the migration stream, and
a large blob whose size cannot be expressed in a 32-bit integer will
be corrupted after migration. Deny creating such large blobs.

Fixes: 10b9ddbc83b9 ("Revert "virtio-gpu: block migration of VMs with 
blob=true"")
Signed-off-by: Akihiko Odaki <[email protected]>
---
  hw/display/virtio-gpu.c | 8 ++++++++
  1 file changed, 8 insertions(+)

Reviewed-by: Philippe Mathieu-Daudé <[email protected]>

Reply via email to