On Tue, Jul 23, 2019 at 04:17:52PM +0530, P J P wrote: > From: Prasad J Pandit <p...@fedoraproject.org> > > The network interface name in Linux is defined to be of size > IFNAMSIZ(=16), including the terminating null('\0') byte. > The same is applied to interface names read from 'bridge.conf' > file to form ACL rules. If user supplied '--br=bridge' name > is not restricted to the same length, it could lead to ACL bypass > issue. Restrict interface name to IFNAMSIZ, including null byte. > > Reported-by: Riccardo Schirone <rschi...@redhat.com> > Signed-off-by: Prasad J Pandit <p...@fedoraproject.org> > --- > qemu-bridge-helper.c | 11 +++++++++++ > 1 file changed, 11 insertions(+)
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com> Regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|