24 Feb
2020
24 Feb
'20
11:43 a.m.
On Mon, Feb 24, 2020 at 12:01:45 +0100, Peter Krempa wrote:
On Sat, Feb 22, 2020 at 05:23:38 -0600, Eric Blake wrote:
[...]
libvirt HAS to use blockdev-open on the backing chain and supply a backing format there, and thus has to probe images. If libvirt ever probes differently than qemu, we are back to the potential guest-visible data corruption or potential host CVEs.
As I've elaborated in [1] I disagree with the host CVE part. The
[1] https://www.redhat.com/archives/libvir-list/2020-February/msg00624.html
insecure part is not probing the format itself, but probing format AND using the backing file of the image if we probed format.