Re: [PATCH 0/3] Tighten qemu-img rules on missing backing format
On Mon, Feb 24, 2020 at 12:01:45 +0100, Peter Krempa wrote:
On Sat, Feb 22, 2020 at 05:23:38 -0600, Eric Blake wrote:
[...]
> libvirt HAS to use blockdev-open on the backing chain and supply
a
> backing format there, and thus has to probe images. If libvirt ever
> probes differently than qemu, we are back to the potential
> guest-visible data corruption or potential host CVEs.
As I've elaborated in [1] I disagree with the host CVE part. The
[1] https://www.redhat.com/archives/libvir-list/2020-February/msg00624.html
insecure part is not probing the format itself, but probing format
AND
using the backing file of the image if we probed format.