[Qemu-devel] [PATCH v3 0/3] 9P security fixes

2016-08-30 Thread Greg Kurz
As reported by Felix Wilhelm, at various places in 9pfs, full paths are created by concatenating a guest originated string to the export path. A malicious guest could forge a relative path and access files outside the export path. A tentative fix was sent recently by Prasad J Pandit, but it was on

[Qemu-devel] [PATCH v3 0/3] 9P security fixes

2016-08-30 Thread Greg Kurz
As reported by Felix Wilhelm, at various places in 9pfs, full paths are created by concatenating a guest originated string to the export path. A malicious guest could forge a relative path and access files outside the export path. A tentative fix was sent recently by Prasad J Pandit, but it was on