On Mon, Feb 24, 2020 at 12:01:45 +0100, Peter Krempa wrote: > On Sat, Feb 22, 2020 at 05:23:38 -0600, Eric Blake wrote:
[...] > > libvirt HAS to use blockdev-open on the backing chain and supply a > > backing format there, and thus has to probe images. If libvirt ever > > probes differently than qemu, we are back to the potential > > guest-visible data corruption or potential host CVEs. > > As I've elaborated in [1] I disagree with the host CVE part. The [1] https://www.redhat.com/archives/libvir-list/2020-February/msg00624.html > insecure part is not probing the format itself, but probing format AND > using the backing file of the image if we probed format.
