[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL 00/28] 9p CVE-2016-9602 fixes 2017-02-28 for 2.9 soft
From: |
Greg Kurz |
Subject: |
[Qemu-devel] [PULL 00/28] 9p CVE-2016-9602 fixes 2017-02-28 for 2.9 soft freeze |
Date: |
Tue, 28 Feb 2017 11:30:12 +0100 |
The following changes since commit 9b9fbe8a4e9eec9072ee2697a6af59144442785f:
Merge remote-tracking branch 'remotes/kraxel/tags/pull-ui-20170227-1' into
staging (2017-02-27 19:19:46 +0000)
are available in the git repository at:
https://github.com/gkurz/qemu.git tags/cve-2016-9602-for-upstream
for you to fetch changes up to c23d5f1d5bc0e23aeb845b1af8f996f16783ce98:
9pfs: local: drop unused code (2017-02-28 11:21:15 +0100)
----------------------------------------------------------------
This pull request have all the fixes for CVE-2016-9602, so that it can
be easily picked up by downstreams, as suggested by Michel Tokarev.
----------------------------------------------------------------
Greg Kurz (28):
9pfs: local: move xattr security ops to 9p-xattr.c
9pfs: remove side-effects in local_init()
9pfs: remove side-effects in local_open() and local_opendir()
9pfs: introduce relative_openat_nofollow() helper
9pfs: local: keep a file descriptor on the shared folder
9pfs: local: open/opendir: don't follow symlinks
9pfs: local: lgetxattr: don't follow symlinks
9pfs: local: llistxattr: don't follow symlinks
9pfs: local: lsetxattr: don't follow symlinks
9pfs: local: lremovexattr: don't follow symlinks
9pfs: local: unlinkat: don't follow symlinks
9pfs: local: remove: don't follow symlinks
9pfs: local: utimensat: don't follow symlinks
9pfs: local: statfs: don't follow symlinks
9pfs: local: truncate: don't follow symlinks
9pfs: local: readlink: don't follow symlinks
9pfs: local: lstat: don't follow symlinks
9pfs: local: renameat: don't follow symlinks
9pfs: local: rename: use renameat
9pfs: local: improve error handling in link op
9pfs: local: link: don't follow symlinks
9pfs: local: chmod: don't follow symlinks
9pfs: local: chown: don't follow symlinks
9pfs: local: symlink: don't follow symlinks
9pfs: local: mknod: don't follow symlinks
9pfs: local: mkdir: don't follow symlinks
9pfs: local: open2: don't follow symlinks
9pfs: local: drop unused code
hw/9pfs/9p-local.c | 1023 ++++++++++++++++++++++++++---------------------
hw/9pfs/9p-local.h | 20 +
hw/9pfs/9p-posix-acl.c | 44 +-
hw/9pfs/9p-util.c | 69 ++++
hw/9pfs/9p-util.h | 54 +++
hw/9pfs/9p-xattr-user.c | 24 +-
hw/9pfs/9p-xattr.c | 166 +++++++-
hw/9pfs/9p-xattr.h | 87 +---
hw/9pfs/Makefile.objs | 2 +-
9 files changed, 893 insertions(+), 596 deletions(-)
create mode 100644 hw/9pfs/9p-local.h
create mode 100644 hw/9pfs/9p-util.c
create mode 100644 hw/9pfs/9p-util.h
--
2.7.4
- [Qemu-devel] [PULL 00/28] 9p CVE-2016-9602 fixes 2017-02-28 for 2.9 soft freeze,
Greg Kurz <=
- [Qemu-devel] [PULL 03/28] 9pfs: remove side-effects in local_open() and local_opendir(), Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 01/28] 9pfs: local: move xattr security ops to 9p-xattr.c, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 02/28] 9pfs: remove side-effects in local_init(), Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 05/28] 9pfs: local: keep a file descriptor on the shared folder, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 06/28] 9pfs: local: open/opendir: don't follow symlinks, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 04/28] 9pfs: introduce relative_openat_nofollow() helper, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 09/28] 9pfs: local: lsetxattr: don't follow symlinks, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 07/28] 9pfs: local: lgetxattr: don't follow symlinks, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 08/28] 9pfs: local: llistxattr: don't follow symlinks, Greg Kurz, 2017/02/28
- [Qemu-devel] [PULL 12/28] 9pfs: local: remove: don't follow symlinks, Greg Kurz, 2017/02/28