Google GitGoogle Git
Sign in
qemu/qemu/8e0ddb4a6ebd1c3d2dfd067f82b6d92de5b23e30
commit
8e0ddb4a6ebd1c3d2dfd067f82b6d92de5b23e30
[log]
author
Gerd Hoffmann <kraxel@redhat.com>
Mon Jul 20 16:32:40 2026 +0200
committer
Gerd Hoffmann <kraxel@redhat.com>
Wed Jul 22 12:28:46 2026 +0200
tree
ced9085f15dcdb8d3cc1814df4e593c64e34b5cb
parent
647ba95eda5a21518f84c6593ed97e0447f38a90 [diff]
hw/uefi: account variable policy entries against storage size

uefi-vars already tracks (and limits) the memory footprint of UEFI
variables.  Do that for variable policies too.

Fixes: CVE-2026-61405
Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3890
Acked-by: Luigi Leonardi <leonardi@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-ID: <20260720143244.821889-5-kraxel@redhat.com>
2 files changed
tree: ced9085f15dcdb8d3cc1814df4e593c64e34b5cb
  1. .github/
  2. .gitlab/
  3. .gitlab-ci.d/
  4. accel/
  5. audio/
  6. authz/
  7. backends/
  8. block/
  9. bsd-user/
  10. chardev/
  11. common-user/
  12. configs/
  13. contrib/
  14. crypto/
  15. disas/
  16. docs/
  17. dump/
  18. ebpf/
  19. fpu/
  20. fsdev/
  21. gdbstub/
  22. host/
  23. hw/
  24. include/
  25. io/
  26. libdecnumber/
  27. linux-headers/
  28. linux-user/
  29. migration/
  30. monitor/
  31. nbd/
  32. net/
  33. pc-bios/
  34. plugins/
  35. po/
  36. python/
  37. pyvenv/
  38. qapi/
  39. qga/
  40. qobject/
  41. qom/
  42. replay/
  43. roms/
  44. rust/
  45. scripts/
  46. scsi/
  47. semihosting/
  48. stats/
  49. storage-daemon/
  50. stubs/
  51. subprojects/
  52. system/
  53. target/
  54. tcg/
  55. tests/
  56. tools/
  57. trace/
  58. ui/
  59. util/
  60. .b4-config
  61. .dir-locals.el
  62. .editorconfig
  63. .exrc
  64. .gdbinit
  65. .git-blame-ignore-revs
  66. .gitattributes
  67. .gitignore
  68. .gitlab-ci.yml
  69. .gitmodules
  70. .gitpublish
  71. .mailmap
  72. .patchew.yml
  73. .readthedocs.yml
  74. .travis.yml
  75. block.c
  76. blockdev-nbd.c
  77. blockdev.c
  78. blockjob.c
  79. clippy.toml
  80. configure
  81. COPYING
  82. COPYING.LIB
  83. cpu-common.c
  84. cpu-target.c
  85. event-loop-base.c
  86. gitdm.config
  87. hmp-commands-info.hx
  88. hmp-commands.hx
  89. iothread.c
  90. job-qmp.c
  91. job.c
  92. Kconfig
  93. Kconfig.host
  94. LICENSE
  95. MAINTAINERS
  96. Makefile
  97. meson.build
  98. meson_options.txt
  99. module-common.c
  100. os-posix.c
  101. os-wasm.c
  102. os-win32.c
  103. page-vary-common.c
  104. page-vary-system.c
  105. pythondeps.toml
  106. qemu-bridge-helper.c
  107. qemu-edid.c
  108. qemu-img-cmds.hx
  109. qemu-img.c
  110. qemu-io-cmds.c
  111. qemu-io.c
  112. qemu-keymap.c
  113. qemu-nbd.c
  114. qemu-options.hx
  115. qemu.nsi
  116. qemu.sasl
  117. README.rst
  118. replication.c
  119. run.in
  120. target-info-qom.c
  121. target-info-stub.c
  122. target-info.c
  123. trace-events
  124. VERSION
  125. version.rc