[Qemu-devel] [Bug 1357440] [NEW] qemu-img: Assert for 'amend' command and the fuzzed image

[Maria Kustova]

Public bug reported:

'qemu-img amend' failed with the assert on the fuzzed image.

Sequence:
 1. Unpack the attached archive, make a copy of test.img
 2. Put copy.img and backing_img.vdi in the same directory
 3. Execute
   qemu-img amend -o compat=0.10 -f qcow2 copy.img

Result: qemu-img was killed by SIGIOT with the reason:

qemu-img: block/qcow2-cluster.c:1598: expand_zero_clusters_in_l1:
Assertion `(cluster_index >= 0) && (cluster_index < *nb_clusters)'
failed.

qemu.git HEAD 2d591ce2aeebf

** Affects: qemu
     Importance: Undecided
         Status: New

** Attachment added: "images.n.traces.tar.gz"
   
https://bugs.launchpad.net/bugs/1357440/+attachment/4178578/+files/images.n.traces.tar.gz

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1357440

Title:
  qemu-img: Assert for 'amend' command and the fuzzed image

Status in QEMU:
  New

Bug description:
  'qemu-img amend' failed with the assert on the fuzzed image.

  Sequence:
   1. Unpack the attached archive, make a copy of test.img
   2. Put copy.img and backing_img.vdi in the same directory
   3. Execute
     qemu-img amend -o compat=0.10 -f qcow2 copy.img

  Result: qemu-img was killed by SIGIOT with the reason:

  qemu-img: block/qcow2-cluster.c:1598: expand_zero_clusters_in_l1:
  Assertion `(cluster_index >= 0) && (cluster_index < *nb_clusters)'
  failed.

  qemu.git HEAD 2d591ce2aeebf

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1357440/+subscriptions