search for: wrestool

Sorry for missing the importance of these earlier. These vulnerabilities were first disclosed this January. There are seven vulnerabilities reported in the icoutils package, in the 'wrestool' program. Unfortunately because libguestfs downloads untrusted guest content and processes it with 'wrestool -x' on the host, libguestfs is vulnerable to these. This could lead to host local code execution if you run inspection tools (like virt-inspector) on untrusted guests or disk i...

Hi, the libguestfs library uses a number of external tools; for some of them, we search for them at build time, enabling some feature only if found, and later on assuming at runtime they are installed. However, the situation is more complex than that: - hardcoding the full path means that there is an incoherency in the way some of the tools are used, as some other tools (e.g. qemu-img) are

Hi, the libguestfs library uses a number of external tools; for some of them, we search for them at build time, enabling some feature only if found, and later on assuming at runtime they are installed. However, the situation is more complex than that: - hardcoding the full path means that there is an incoherency in the way some of the tools are used, as some other tools (e.g. qemu-img) are

...oaded == NULL) return NOT_FOUND; - pngfile = safe_asprintf (g, "%s/windows-xp-icon.png", g->tmpdir); + pngfile = guestfs_int_make_temp_path (g, "windows-xp-icon", "png"); + if (!pngfile) + return NOT_FOUND; guestfs_int_cmd_add_string_unquoted (cmd, WRESTOOL " -x --type=2 --name=143 "); guestfs_int_cmd_add_string_quoted (cmd, filename_downloaded); @@ -542,7 +546,9 @@ icon_windows_7 (guestfs_h *g, const char *systemroot, size_t *size_r) if (filename_downloaded == NULL) return NOT_FOUND; - pngfile = safe_asprintf (g, "%s/wi...

Hey guys, I was curious about something. When Wine installs a program, that creates a shortcut after installation, it is usually placed on the desktop (as it would in Windows). So how I can create the same type of shortcut which will use the .exe's inbuilt icon; as Wine does? I know how to create a shortcut but i'd manually need to search for a .png file to use as that shortcuts icon.

...d Hat-derived and Debian-derived -Linux guests, this is the package name. +The name of the application. For Linux guests, this is the package +name. =item C<app2_display_name> @@ -763,8 +763,8 @@ required size. =item * Extracting icons from Windows guests requires the external -C<wrestool> program from the C<icoutils> package, and -several programs (C<bmptopnm>, C<pnmtopng>, C<pamcut>) +L<wrestool(1)> program from the C<icoutils> package, and +several programs (L<bmptopnm(1)>, L<pnmtopng(1)>, L<pamcut(1)>) from the C<netpb...

...and run on this architecture. Other The libguestfs API is now thread-safe (although not parallel). You can call APIs on the same handle from multiple threads without needing to take a lock. Security There were multiple vulnerabilities in the icoutils "wrestool" program which is run by libguestfs to create icons for Windows guests. Using the latest "wrestool" is recommended. API New APIs "hivex_value_string" This replaces the deprecated "hivex_value_utf8" API, but does the...

Inspired by libvirt's virCommand* internal mini-library, this adds some internal APIs for running commands. The first patch contains the new APIs. The subsequent patches change various parts of the library over to use it. Rich.

v1 -> v2: - Remove the unnecessary calls to guestfs_int_lazy_make_tmpdir in the final patch. Rich.

Miscellaneous small cleanups in lib/ directory. Rich.

...ect header files now live in a subdirectory - CompareWithString test in the generator now works - FUInt32, FUInt64 struct field types now use the correct XDR type - OCaml tests are now run on bytecode and native code. - java -Xlint:all is used, and all warnings have been fixed - bmptopng, wrestool (etc) missing or failure no longer prints warning messages - ruby: Use RbConfig instead of Config. - PYTHONPATH is set by the ./run script. - appliance building is now thread-safe. - appliance now uses 'ip' instead of 'ifconfig' and 'netstat' commands - sever...

Two (not related to each other) refactorings: Patches 1-12 split configure.ac into smaller files using the m4_include mechanism. Patches 13-15 split out parts of guestfs.pod (ie. guestfs(3)) into three new manual pages: guestfs-hacking(3) - how to extend and contribute to libguestfs guestfs-internals(3) - architecture and internals guestfs-security(3) - security and CVEs Patch 16 is a

..., char **ret) { char **lines; int64_t size; diff --git a/src/inspect-icon.c b/src/inspect-icon.c index fe38266..748680d 100644 --- a/src/inspect-icon.c +++ b/src/inspect-icon.c @@ -32,8 +32,8 @@ #if defined(PBMTEXT) && defined (PNMTOPNG) #define CAN_DO_CIRROS 1 #endif -#if defined(WRESTOOL) && defined(BMPTOPNM) && defined(PNMTOPNG) && \ - defined(PAMCUT) +#if defined(WRESTOOL) && defined(BMPTOPNM) && defined(PNMTOPNG) && \ + defined(PAMCUT) #define CAN_DO_WINDOWS 1 #endif @@ -78,7 +78,7 @@ static char *NOT_FOUND = (char *) &quot...

Result of earlier copy and paste. --- align/scan.c | 35 ++++++++++--------- cat/cat.c | 39 +++++++++++---------- cat/filesystems.c | 69 +++++++++++++++++++------------------- cat/log.c | 35 ++++++++++--------- cat/ls.c | 61 +++++++++++++++++---------------- df/main.c | 43 ++++++++++++------------ diff/diff.c | 67

...CompareWithString test in the generator now works - + - FUInt32, FUInt64 struct field types now use the correct XDR type - + - OCaml tests are now run on bytecode and native code. - + - java -Xlint:all is used, and all warnings have been fixed - + - bmptopng, wrestool (etc) missing or failure no longer prints warning messages - + - ruby: Use RbConfig instead of Config. - + - PYTHONPATH is set by the ./run script. - + - appliance building is now thread-safe. - + - appliance now uses 'ip' instead of 'ifco...

libguestfs has used double and triple underscores in identifiers. These aren't valid for global names in C++. (http://stackoverflow.com/a/228797) These large but completely mechanical patches change the illegal identifiers to legal ones. Rich.

...no checking for db_load... no checking for db5.1_load... no checking for db4_load... no checking for db4.8_load... no checking for db4.7_load... no checking for db4.6_load... no checking for pbmtext... no checking for pnmtopng... no checking for bmptopnm... no checking for pamcut... no checking for wrestool... no checking for xzcat... /usr/bin/xzcat checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking for LIBLZMA... yes checking for lzma_index_stream_flags... yes checking for lzma_index_stream_padding... yes checking for flex... flex checking lex...

Hi Rich, This series includes patches to make `make syntax-check` pass. Some of the fix require change to maint.mk, but the file is not in git repo. Is it intended? Thanks! Hu Tao (13): syntax-check: dirty hack to pass bindtextdomain check syntax-check: fix error_message_period check syntax-check: fix makefile_at_at_check syntax-check: fix prohibit_assert_without_use check

Hi Rich Yes Rich I have tried libguesftfs on powerpc and it was working fine.For some reason i had to format my hard disk and now when I'm again compiling it,I'm getting following error.... Below is the status of configure .. This is how we have configured the optional components for you today: Daemon .............................. yes Appliance ........................... yes QEMU

See this bug for background information: https://bugzilla.redhat.com/show_bug.cgi?id=1350465 Thanks: Tomáš Golembiovský --- v2v/virt-v2v.pod | 38 ++++++++++++++++++++++++++------------ 1 file changed, 26 insertions(+), 12 deletions(-) diff --git a/v2v/virt-v2v.pod b/v2v/virt-v2v.pod index e68d75cf8..0943bf305 100644 --- a/v2v/virt-v2v.pod +++ b/v2v/virt-v2v.pod @@ -1909,18 +1909,32 @@ that