summary refs log tree commit diff stats
path: root/scripts/qapi-commands.py
diff options
context:
space:
mode:
authorGreg Kurz <groug@kaod.org>2017-02-26 23:43:32 +0100
committerGreg Kurz <groug@kaod.org>2017-02-28 11:21:15 +0100
commitac125d993b461d4dee4d6df4d93ac3f2eb959d1d (patch)
tree09c9cf74e1afda864a5c387c5ff109a0a34b1527 /scripts/qapi-commands.py
parent31e51d1c15b35dc98b88a301812914b70a2b55dc (diff)
downloadfocaccia-qemu-ac125d993b461d4dee4d6df4d93ac3f2eb959d1d.tar.gz
focaccia-qemu-ac125d993b461d4dee4d6df4d93ac3f2eb959d1d.zip
9pfs: local: truncate: don't follow symlinks
The local_truncate() callback is vulnerable to symlink attacks because
it calls truncate() which follows symbolic links in all path elements.

This patch converts local_truncate() to rely on open_nofollow() and
ftruncate() instead.

This partly fixes CVE-2016-9602.

Signed-off-by: Greg Kurz <groug@kaod.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'scripts/qapi-commands.py')
0 files changed, 0 insertions, 0 deletions