diff options
| author | Prasad J Pandit | 2019-07-23 12:47:52 +0200 |
|---|---|---|
| committer | Jason Wang | 2019-07-29 10:29:30 +0200 |
| commit | 6f5d8671225dc77190647f18a27a0d156d4ca97a (patch) | |
| tree | dd5953e52468dfc108a332a86c178574348564cd /python | |
| parent | e1000: don't raise interrupt in pre_save() (diff) | |
| download | qemu-6f5d8671225dc77190647f18a27a0d156d4ca97a.tar.gz qemu-6f5d8671225dc77190647f18a27a0d156d4ca97a.tar.xz qemu-6f5d8671225dc77190647f18a27a0d156d4ca97a.zip | |
qemu-bridge-helper: restrict interface name to IFNAMSIZ
The network interface name in Linux is defined to be of size
IFNAMSIZ(=16), including the terminating null('\0') byte.
The same is applied to interface names read from 'bridge.conf'
file to form ACL rules. If user supplied '--br=bridge' name
is not restricted to the same length, it could lead to ACL bypass
issue. Restrict interface name to IFNAMSIZ, including null byte.
Reported-by: Riccardo Schirone <rschiron@redhat.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Li Qiang <liq3ea@gmail.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'python')
0 files changed, 0 insertions, 0 deletions