diff options
| author | Greg Kurz <groug@kaod.org> | 2017-02-26 23:44:03 +0100 |
|---|---|---|
| committer | Greg Kurz <groug@kaod.org> | 2017-02-28 11:21:15 +0100 |
| commit | d2767edec582558f1e6c52e1dd9370d62e2b30fc (patch) | |
| tree | 91e1171b715a8c2626a1351b68d8bcf6b2e69944 /fpu | |
| parent | 99f2cf4b2dad7b37c69759deb0d0b19d3ec1a24a (diff) | |
| download | qemu-d2767edec582558f1e6c52e1dd9370d62e2b30fc.zip qemu-d2767edec582558f1e6c52e1dd9370d62e2b30fc.tar.gz qemu-d2767edec582558f1e6c52e1dd9370d62e2b30fc.tar.bz2 | |
9pfs: local: rename: use renameat
The local_rename() callback is vulnerable to symlink attacks because it
uses rename() which follows symbolic links in all path elements but the
rightmost one.
This patch simply transforms local_rename() into a wrapper around
local_renameat() which is symlink-attack safe.
This partly fixes CVE-2016-9602.
Signed-off-by: Greg Kurz <groug@kaod.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'fpu')
0 files changed, 0 insertions, 0 deletions