libvirt/docs/schemas
Eric Blake 45d40bcf45 storage: use valid XML for awkward volume names
$ touch /var/lib/libvirt/images/'a<b>c'
$ virsh pool-refresh default
$ virsh vol-dumpxml 'a<b>c' default | head -n2
<volume>
  <name>a<b>c</name>

Oops.  That's not valid XML.  And when we fix the XML
generation, it fails RelaxNG validation.

I'm also tired of seeing <key>(null)</key> in the example
output for volume xml; while we used NULLSTR() to avoid
a NULL deref rather than relying on glibc's printf
extension behavior, it's even better if we avoid the issue
in the first place.  But this requires being careful that
we don't invalidate any storage backends that were relying
on key being unassigned during virStoragVolCreateXML[From].

I would have split this into two patches (one for escaping,
one for avoiding <key>(null)</key>), but since they both
end up touching a lot of the same test files, I ended up
merging it into one.

Note that this patch allows pretty much any volume name
that can appear in a directory (excluding . and .. because
those are special), but does nothing to change the current
(unenforced) RelaxNG claim that pool names will consist
only of letters, numbers, _, -, and +.  Tightening the C
code to match RelaxNG patterns and/or relaxing the grammar
to match the C code for pool names is a task for another
day (but remember, we DID recently tighten C code for
domain names to exclude a leading '.').

* src/conf/storage_conf.c (virStoragePoolSourceFormat)
(virStoragePoolDefFormat, virStorageVolTargetDefFormat)
(virStorageVolDefFormat): Escape user-controlled strings.
(virStorageVolDefParseXML): Parse key, for use in unit tests.
* src/storage/storage_driver.c (storageVolCreateXML)
(storageVolCreateXMLFrom): Ensure parsed key doesn't confuse
volume creation.
* docs/schemas/basictypes.rng (volName): Relax definition.
* tests/storagepoolxml2xmltest.c (mymain): Test it.
* tests/storagevolxml2xmltest.c (mymain): Likewise.
* tests/storagepoolxml2xmlin/pool-dir-naming.xml: New file.
* tests/storagepoolxml2xmlout/pool-dir-naming.xml: Likewise.
* tests/storagevolxml2xmlin/vol-file-naming.xml: Likewise.
* tests/storagevolxml2xmlout/vol-file-naming.xml: Likewise.
* tests/storagevolxml2xmlout/vol-*.xml: Fix fallout.

Signed-off-by: Eric Blake <eblake@redhat.com>
(cherry picked from commit 6cc4d6a3fe)
2014-03-10 09:16:58 -04:00
..
basictypes.rng storage: use valid XML for awkward volume names 2014-03-10 09:16:58 -04:00
capability.rng qemu: Implement CPUs check against machine type's cpu-max 2013-07-01 14:30:42 +02:00
domain.rng
domaincommon.rng LXC: Fix handling of RAM filesystem size units 2013-10-15 12:58:52 +02:00
domainsnapshot.rng Add support for storage format in FS <driver> 2013-05-13 13:15:19 +01:00
interface.rng xml: Clean up schemas to use shared data types instead of local 2012-03-08 15:31:54 +01:00
Makefile.am conf: add features to volume target XML 2013-06-21 13:25:30 +02:00
network.rng Add forwarder attribute to <dns/> element 2013-09-17 17:47:33 -06:00
networkcommon.rng Add '<nat>' element to '<forward>' network schemas 2013-09-05 13:45:49 +02:00
nodedev.rng nodedev: add iommuGroup to node device object 2013-06-26 14:10:56 -04:00
nwfilter.rng Correct invalid RNG schemas 2013-03-21 17:24:08 +01:00
secret.rng secret: add iscsi to possible usage types 2013-03-22 12:10:23 +08:00
storageencryption.rng rng: Have colorful *.rng with editor 2013-01-23 23:03:17 +08:00
storagefilefeatures.rng conf: add features to volume target XML 2013-06-21 13:25:30 +02:00
storagepool.rng Make logical pools independent on target path 2013-07-16 12:16:37 +02:00
storagevol.rng conf: add features to volume target XML 2013-06-21 13:25:30 +02:00