openstack
/
nova
Code Issues Proposed changes
nova/nova
History
Matthew Booth 915fdbbfb8 Fix backing file detection in libvirt live snapshot 
When doing a live snapshot, the libvirt driver creates an intermediate
qcow2 file with the same backing file as the original disk. However,
it calls qemu-img info without specifying the input format explicitly.
An authenticated user can write data to a raw disk which will cause
this code to misinterpret the disk as a qcow2 file with a
user-specified backing file on the host, and return an arbitrary host
file as the backing file.

This bug does not appear to result in a data leak in this case, but
this is hard to verify. It certainly results in corrupt output.

Closes-Bug: #1524274

Change-Id: I11485f077d28f4e97529a691e55e3e3c0bea8872
 		2016-01-14 11:41:56 +00:00
..
CA
…
api Merge "Use timedelta.total_second instead of calculating" 2016-01-13 22:27:32 +00:00
cells Remove unused logging import and LOG global var 2015-12-25 18:01:12 +08:00
cert Update rpc version aliases for liberty 2015-10-01 20:33:43 -04:00
cloudpipe Remove Deprecated EC2 and ObjectStore impl/tests 2016-01-08 06:30:20 -05:00
cmd Add caching of service_min_versions in the conductor 2016-01-11 11:15:32 +00:00
compute Merge "Actually pass the migration data object down to the virt drivers" 2016-01-14 08:55:51 +00:00
conductor Add caching of service_min_versions in the conductor 2016-01-11 11:15:32 +00:00
conf Merge "Scheduler: enforce max attempts at service startup" 2016-01-13 13:43:37 +00:00
console Python 3 deprecated the logger.warn method in favor of warning 2015-12-30 14:26:45 +00:00
consoleauth Add SIGHUP handlers for compute rpcapi to console and conductor 2015-12-10 08:48:05 -08:00
db Correct the code description 2016-01-06 22:28:52 +08:00
hacking add hacking check for config options location 2015-11-26 19:24:19 +01:00
image Merge "deprecate old glance config options" 2016-01-08 16:07:07 +00:00
ipv6
…
keymgr
…
locale Imported Translations from Zanata 2016-01-08 06:12:53 +00:00
mks
…
network Merge "Docstring change for consistency" 2016-01-13 22:45:42 +00:00
objects Merge "Remove DictCompat from EC2 objects" 2016-01-13 22:43:27 +00:00
openstack use graduated oslo.policy 2015-11-26 13:04:52 +08:00
pci pci: do not filter out any SRIOV Physical Functions 2016-01-12 21:13:12 -05:00
rdp
…
scheduler Merge "Scheduler: enforce max attempts at service startup" 2016-01-13 13:43:37 +00:00
servicegroup Optimize "open" method with context manager 2015-12-03 10:12:52 +08:00
spice
…
tests Fix backing file detection in libvirt live snapshot 2016-01-14 11:41:56 +00:00
virt Fix backing file detection in libvirt live snapshot 2016-01-14 11:41:56 +00:00
vnc Merge "Add hacking check for eventlet.spawn()" 2015-10-08 03:43:00 +00:00
volume Remove unused logging import and LOG global var 2015-12-25 18:01:12 +08:00
wsgi Remove unused logging import and LOG global var 2015-12-25 18:01:12 +08:00
__init__.py
…
availability_zones.py Invalidate AZ cache when the instance AZ information is different 2015-09-09 17:14:35 +02:00
baserpc.py
…
block_device.py libvirt: sort block_device_list in volume_in_mapping log 2016-01-05 12:05:36 -08:00
config.py Revert "Enable options for oslo.reports" 2015-12-05 16:12:52 +00:00
context.py Replace copy.deepcopy of RequestContext with copy.copy 2015-12-28 18:37:15 +00:00
crypto.py Replaced deprecated timeutils methods 2015-11-18 17:45:29 +01:00
debugger.py Use min and max on IntOpt option types 2015-08-14 04:37:21 +00:00
exception.py Merge "libvirt: add realtime support" 2016-01-11 21:54:23 +00:00
filters.py Prepare filters for using RequestSpec object 2015-11-16 22:41:02 +01:00
hooks.py
…
i18n.py
…
loadables.py
…
manager.py Remove unused logging import and LOG global var 2015-12-25 18:01:12 +08:00
netconf.py
…
notifications.py Replaced deprecated timeutils methods 2015-11-18 17:45:29 +01:00
opts.py Merge "single point of entry for sample config generation" 2016-01-11 21:50:36 +00:00
paths.py
…
policy.py use graduated oslo.policy 2015-11-26 13:04:52 +08:00
quota.py
…
rpc.py
…
safe_utils.py Replace safe_utils.getcallargs with inspect.getcallargs 2015-12-11 10:15:37 -05:00
service.py Remove Deprecated EC2 and ObjectStore impl/tests 2016-01-08 06:30:20 -05:00
signature_utils.py Fix sphinx warnings from signature_utils 2016-01-13 13:56:05 +00:00
test.py introduce ``stub_out`` method to base test class 2016-01-05 11:30:05 -05:00
utils.py Remove Deprecated EC2 and ObjectStore impl/tests 2016-01-08 06:30:20 -05:00
version.py
…
weights.py
…
wsgi.py Merge "Add hacking check for eventlet.spawn()" 2015-10-08 03:43:00 +00:00