Code: void rng_backend_request_entropy(RngBackend *s, size_t size,
                                 EntropyReceiveFunc *receive_entropy,
                                  void *opaque)
 {
     RngBackendClass *k = RNG_BACKEND_GET_CLASS(s);
 
     if (k->request_entropy) {
        k->request_entropy(s, size, receive_entropy, opaque);
     }
 }

Vulnerability Type: DoS Overflow Mem. Corr.
CWE ID: CWE-119
Summary: QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.
Commit Message: 