shaba/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-03-11 00:58:38 +03:00
Code Releases Activity

api: disallow virConnectGetDomainCapabilities on read-only connections

Browse Source 
This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.

Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
This commit is contained in:
Ján Tomko 2019-06-14 09:16:14 +02:00
parent b22baef312
commit a663e28410
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/libvirt-domain.c
View File

@ -11303,6 +11303,7 @@ virConnectGetDomainCapabilities(virConnectPtr conn,
virResetLastError(); virResetLastError();
virCheckConnectReturn(conn, NULL); virCheckConnectReturn(conn, NULL);
virCheckReadOnlyGoto(conn->flags, error);
if (conn->driver->connectGetDomainCapabilities) { if (conn->driver->connectGetDomainCapabilities) {
char *ret; char *ret;