openstack
/
glance
Code Issues Proposed changes
glance/glance/async/flows
History
Brian Rosmaita 58311904a7 Adding constraints around qemu-img calls 
* All "qemu-img info" calls are now run under resource limitations that
  limit CPU time to 2 seconds and address space usage to 1 GB. This
  helps avoid any DoS attacks via malicious images.
* All "qemu-img convert" calls now specify the import format so that it
  does not have to be inferred by qemu-img.

SecurityImpact

(Hemanth did all the work on this, I'm just doing the backport.)

Co-authored-by: Hemanth Makkapati <hemanth.makkapati@rackspace.com>
Closes-Bug: #1449062
(cherry picked from commit 69a9b659fd)

Change-Id: I65f30b85439a8811545b0ca590555528631954df
 		2016-09-27 16:11:17 -04:00
..
__init__.py Glance Image Introspection 2015-03-10 11:01:18 -04:30
base_import.py Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00
convert.py Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00
introspect.py Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00