aboutsummaryrefslogtreecommitdiff
path: root/nbd
diff options
context:
space:
mode:
authorEric Blake <eblake@redhat.com>2019-03-30 10:57:04 -0500
committerEric Blake <eblake@redhat.com>2019-04-01 08:31:16 -0500
commit3add3ab78247fd347fd6f377a4b951022ac35d35 (patch)
treeca6d7d4636d61456aedc1b05c437cf0b684d47fa /nbd
parenta62a85ef5ccd764d03d72d6c3cd558f9755b3457 (diff)
downloadqemu-3add3ab78247fd347fd6f377a4b951022ac35d35.zip
qemu-3add3ab78247fd347fd6f377a4b951022ac35d35.tar.gz
qemu-3add3ab78247fd347fd6f377a4b951022ac35d35.tar.bz2
nbd/client: Reject inaccessible tail of inconsistent server
The NBD spec suggests that a server should never advertise a size inconsistent with its minimum block alignment, as that tail is effectively inaccessible to a compliant client obeying those block constraints. Since we have a habit of rounding up rather than truncating, to avoid losing the last few bytes of user input, and we cannot access the tail when the server advertises bogus block sizing, abort the connection to alert the server to fix their bug. And rejecting such servers matches what we already did for a min_block that was not a power of 2 or which was larger than max_block. Does not impact either qemu (which always sends properly aligned sizes) or nbdkit (which does not send minimum block requirements yet); so this is mostly aimed at new NBD server implementations, and ensures that the rest of our code can assume the size is aligned. Signed-off-by: Eric Blake <eblake@redhat.com> Message-Id: <20190330155704.24191-1-eblake@redhat.com> Reviewed-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Diffstat (limited to 'nbd')
-rw-r--r--nbd/client.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/nbd/client.c b/nbd/client.c
index de7da48..427980b 100644
--- a/nbd/client.c
+++ b/nbd/client.c
@@ -426,6 +426,14 @@ static int nbd_opt_info_or_go(QIOChannel *ioc, uint32_t opt,
nbd_send_opt_abort(ioc);
return -1;
}
+ if (info->min_block &&
+ !QEMU_IS_ALIGNED(info->size, info->min_block)) {
+ error_setg(errp, "export size %" PRIu64 "is not multiple of "
+ "minimum block size %" PRIu32, info->size,
+ info->min_block);
+ nbd_send_opt_abort(ioc);
+ return -1;
+ }
trace_nbd_receive_negotiate_size_flags(info->size, info->flags);
break;