External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-02-01 17:35:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

api: disallow virConnectGetDomainCapabilities on read-only connections

Browse Source 
This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.

Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
This commit is contained in:
Ján Tomko 2019-06-14 09:16:14 +02:00
parent 00e673c93f
commit 93edb0ea63
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/libvirt-domain.c
View File

@ -11274,6 +11274,7 @@ virConnectGetDomainCapabilities(virConnectPtr conn,
virResetLastError(); virResetLastError();
virCheckConnectReturn(conn, NULL); virCheckConnectReturn(conn, NULL);
virCheckReadOnlyGoto(conn->flags, error);
if (conn->driver->connectGetDomainCapabilities) { if (conn->driver->connectGetDomainCapabilities) {
char *ret; char *ret;