diff options
| author | Paolo Bonzini <pbonzini@redhat.com> | 2011-12-23 15:39:03 +0100 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2012-01-13 10:20:51 -0600 |
| commit | 1ba1f2e319afdcb485963cd3f426fdffd1b725f2 (patch) | |
| tree | 55412245b45b35211f3efeaae09732311c7ba075 /qemu-tool.c | |
| parent | 701a8f76aa5243d90a71935982c20c06d8e83b80 (diff) | |
| download | focaccia-qemu-1ba1f2e319afdcb485963cd3f426fdffd1b725f2.tar.gz focaccia-qemu-1ba1f2e319afdcb485963cd3f426fdffd1b725f2.zip | |
virtio-blk: refuse SG_IO requests with scsi=off
QEMU does have a "scsi" option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature bits and issues a request. Without this patch, using scsi=off does not protect you from CVE-2011-4127. Reviewed-by: Stefan Hajnoczi <stefanha@linux.vnet.ibm.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'qemu-tool.c')
0 files changed, 0 insertions, 0 deletions