diff options
| author | Prasad J Pandit <pjp@fedoraproject.org> | 2019-07-23 16:17:52 +0530 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2019-07-29 16:29:30 +0800 |
| commit | 6f5d8671225dc77190647f18a27a0d156d4ca97a (patch) | |
| tree | dd5953e52468dfc108a332a86c178574348564cd /net/tap.c | |
| parent | f46efa9b0895a7ff8ed0b4e874aee52a49f2a878 (diff) | |
qemu-bridge-helper: restrict interface name to IFNAMSIZ
The network interface name in Linux is defined to be of size
IFNAMSIZ(=16), including the terminating null('\0') byte.
The same is applied to interface names read from 'bridge.conf'
file to form ACL rules. If user supplied '--br=bridge' name
is not restricted to the same length, it could lead to ACL bypass
issue. Restrict interface name to IFNAMSIZ, including null byte.
Reported-by: Riccardo Schirone <rschiron@redhat.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Li Qiang <liq3ea@gmail.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'net/tap.c')
0 files changed, 0 insertions, 0 deletions