diff options
| author | Ján Tomko <jtomko@redhat.com> | 2019-06-14 09:17:39 +0200 |
|---|---|---|
| committer | Ján Tomko <jtomko@redhat.com> | 2019-06-24 09:57:05 +0200 |
| commit | a6116fc8618300f6e2a082396812363310d1420f (patch) | |
| tree | 365406b65b40db229cc701e99b901f2dfc6603f3 | |
| parent | 15502d85dd21d7badeb230285898fa28f67cba9d (diff) | |
| download | libvirt-v4.4-maint.tar.gz | |
api: disallow virConnect*HypervisorCPU on read-only connectionsv4.4-maint
These APIs can be used to execute arbitrary emulators.
Forbid them on read-only connections.
Fixes: CVE-2019-10168
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit bf6c2830b6c338b1f5699b095df36f374777b291)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
| -rw-r--r-- | src/libvirt-host.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/libvirt-host.c b/src/libvirt-host.c index 3aaf558cac..cff003109b 100644 --- a/src/libvirt-host.c +++ b/src/libvirt-host.c @@ -1041,6 +1041,7 @@ virConnectCompareHypervisorCPU(virConnectPtr conn, virCheckConnectReturn(conn, VIR_CPU_COMPARE_ERROR); virCheckNonNullArgGoto(xmlCPU, error); + virCheckReadOnlyGoto(conn->flags, error); if (conn->driver->connectCompareHypervisorCPU) { int ret; @@ -1234,6 +1235,7 @@ virConnectBaselineHypervisorCPU(virConnectPtr conn, virCheckConnectReturn(conn, NULL); virCheckNonNullArgGoto(xmlCPUs, error); + virCheckReadOnlyGoto(conn->flags, error); if (conn->driver->connectBaselineHypervisorCPU) { char *cpu; |