[Openstack-security] [openstack/nova] SecurityImpact review request change Idfc16f54049aaeab31ac1c1d8d79a129acc9fb87

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Tue Mar 8 15:06:02 UTC 2016


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/289960

Log:
commit f302bf04ab5dda89cf8ceaeed309006da90c0666
Author: Lee Yarwood <lyarwood at redhat.com>
Date:   Wed Feb 24 11:23:22 2016 +0000

    libvirt: Always copy or recreate disk.info during a migration
    
    The disk.info file contains the path and format of any image, config or
    ephermal disk associated with an instance. When using RAW images and migrating
    an instance this file should always be copied or recreated. This avoids the Raw
    imagebackend reinspecting the format of these disks when spawning the instance
    on the destination host.
    
    By not copying or recreating this disk.info file, a malicious image written to
    an instance disk on the source host will cause Nova to reinspect and record a
    different format for the disk on the destination. This format then being used
    incorrectly when finally spawning the instance on the destination.
    
    Conflicts:
        nova/tests/unit/virt/libvirt/test_driver.py
        nova/virt/libvirt/driver.py
    
    SecurityImpact
    Closes-bug: #1548450
    Change-Id: Idfc16f54049aaeab31ac1c1d8d79a129acc9fb87





More information about the Openstack-security mailing list