qemu-img: Assert for 'amend' command and the fuzzed image

Bug #1357440 reported by Maria Kustova on 2014-08-15
This bug affects 1 person
Affects Status Importance Assigned to Milestone

Bug Description

'qemu-img amend' failed with the assert on the fuzzed image.

 1. Unpack the attached archive, make a copy of test.img
 2. Put copy.img and backing_img.vdi in the same directory
 3. Execute
   qemu-img amend -o compat=0.10 -f qcow2 copy.img

Result: qemu-img was killed by SIGIOT with the reason:

qemu-img: block/qcow2-cluster.c:1598: expand_zero_clusters_in_l1: Assertion `(cluster_index >= 0) && (cluster_index < *nb_clusters)' failed.

qemu.git HEAD 2d591ce2aeebf

Maria Kustova (maria-k-o) wrote :
Max Reitz (xanclic) wrote :


This issue should be fixed by my "[PATCH v3 0/7] block/qcow2: Improve zero cluster expansion" series.

However, there are similar issues in qemu, so we'll probably need a function to quickly mark an image corrupt instead of throwing these assertions.


Max Reitz (xanclic) wrote :


This issue has been fixed in master (af3ff19b48f0bbf3a8bd35c47460358e8c6ae5e5, 2.2.0-rc2):

$ ./qemu-img amend -o compat=0.10 -f qcow2 copy.img
qemu-img: Error while amending options: File too large

Thanks for your report,


Changed in qemu:
status: New → Fix Committed
Thomas Huth (th-huth) on 2016-06-21
Changed in qemu:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers