Sean McGinnis 78f17f0ad7 Limit memory & CPU when running qemu-img info ...

It was found that a modified or corrupted image file can cause a DoS
on the host when getting image info with qemu-img.

This uses the newer 'prlimit' parameter for oslo.concurrency execute
to set an address space limit of 1GB and CPU time limit of 2 seconds
when running the qemu-img info command.

Change-Id: If5b7129b266ef065642bc7898ce9dcf93722a053
Closes-bug: #1449062

2016-09-22 15:31:37 -05:00

289 B

Raw Blame History

View Raw