diff options
| author | Ján Tomko <jtomko@redhat.com> | 2019-06-14 09:16:14 +0200 |
|---|---|---|
| committer | Ján Tomko <jtomko@redhat.com> | 2019-06-24 13:52:01 +0200 |
| commit | 7d3b95b03880c8ade5f908dcb3d3c8b2d8e82a8f (patch) | |
| tree | bbfd43fafdee59860836d5ae58fc15723a7090ee | |
| parent | 4e16e7a3fc44a14f27eda23e75bae75992339b3a (diff) | |
| download | libvirt-v1.2.19-maint.tar.gz | |
api: disallow virConnectGetDomainCapabilities on read-only connectionsv1.2.19-maint
This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.
Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
| -rw-r--r-- | src/libvirt-domain.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/libvirt-domain.c b/src/libvirt-domain.c index 733ac8e270..1a563cf69c 100644 --- a/src/libvirt-domain.c +++ b/src/libvirt-domain.c @@ -11117,6 +11117,7 @@ virConnectGetDomainCapabilities(virConnectPtr conn, virResetLastError(); virCheckConnectReturn(conn, NULL); + virCheckReadOnlyGoto(conn->flags, error); if (conn->driver->connectGetDomainCapabilities) { char *ret; |