Fix CVE-2008-0928 - insufficient block device address range checking (Anthony Liguori)