/[qemu]
ViewVC logotype

Revision 4277


Jump to revision: Previous Next
Author: aurel32
Date: Mon Apr 28 20:26:45 2008 UTC (15 years, 7 months ago)
Changed paths: 2
Log Message:
add format= to drive options (CVE-2008-2004)

It is possible for a guest with a raw formatted disk image to write a
header to that disk image describing another format (such as qcow2).
Stopping and subsequent restart of the guest will cause qemu to detect
that format, and could allow the guest to read any host file if qemu is
sufficiently privileged (typical in virt environments).

The patch defaults to existing behaviour (probing based on file contents),
so it still requires the mgmt app (e.g. libvirt xml) to pass a new
"format=raw" parameter for raw disk images.

Originally noted by Avi Kivity, patch from Chris Wright.

Changed paths:

Path Details
Directorytrunk/qemu-doc.texi modified , text changed
Directorytrunk/vl.c modified , text changed

savannah-hackers-public@gnu.org
ViewVC Help
Powered by ViewVC 1.1.5