summary refs log tree commit diff stats
path: root/scripts/qapi-commands.py
diff options
context:
space:
mode:
authorGreg Kurz <groug@kaod.org>2017-02-26 23:43:55 +0100
committerGreg Kurz <groug@kaod.org>2017-02-28 11:21:15 +0100
commit99f2cf4b2dad7b37c69759deb0d0b19d3ec1a24a (patch)
treeb92a6e12dfca3e84b2897214dfc84669dfae47b6 /scripts/qapi-commands.py
parentf9aef99b3e6df88036436b0d3dc3d504b9346c8c (diff)
downloadfocaccia-qemu-99f2cf4b2dad7b37c69759deb0d0b19d3ec1a24a.tar.gz
focaccia-qemu-99f2cf4b2dad7b37c69759deb0d0b19d3ec1a24a.zip
9pfs: local: renameat: don't follow symlinks
The local_renameat() callback is currently a wrapper around local_rename()
which is vulnerable to symlink attacks.

This patch rewrites local_renameat() to have its own implementation, based
on local_opendir_nofollow() and renameat().

This partly fixes CVE-2016-9602.

Signed-off-by: Greg Kurz <groug@kaod.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'scripts/qapi-commands.py')
0 files changed, 0 insertions, 0 deletions