similar to: [PATCH 0/2] First part of fix for CVE-2010-3851

Signed-off-by: Wanlong Gao <gaowanlong at cn.fujitsu.com> --- po/POTFILES | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/po/POTFILES b/po/POTFILES index 2b4b586..789279a 100644 --- a/po/POTFILES +++ b/po/POTFILES @@ -131,6 +131,45 @@ fish/time.c fish/virt.c format/format.c fuse/guestmount.c +gobject/guestfs-gobject-optargs-add_domain.c

1/8 generator: Rearrange argt logically (RHBZ#642934,CVE-2010-3851). 2/8 generator: Optional arguments, add-drive-opts (RHBZ#642934,CVE-2010-3851). These two previously posted. 3/8 fish: Specify format of disks (RHBZ#642934,CVE-2010-3851). Updates to guestfish to add the --format option and to make -d copy the format from libvirt. 4/8 fuse: Specify format of disks (RHBZ#642934,CVE-2010-3851).

This rather complex set of patches allow non-optargs functions to gain optional arguments, while preserving source and binary backwards compatibility. The problem is that we cannot add an optional argument to an existing function. For example, we might want to add flags to the 'lvresize' API which currently has no optional arguments.

This map was originally included just for the java bindings, but is generally useful to any binding which uses camel case by requirement or convention. --- generator/generator_haskell.ml | 4 ++-- generator/generator_java.ml | 10 +++++----- generator/generator_main.ml | 2 +- generator/generator_structs.ml | 12 +++++------- generator/generator_structs.mli | 8 ++++---- 5

This is the first iteration of the GObject bindings. I have 'kicked the tyres' on these, meaning I have ensured that a bunch of basic manual tests work as expected. I'm in the process of adding more comprehensive tests. Here's an example simple javascript program which uses these bindings: === const Guestfs = imports.gi.Guestfs; print('Starting'); var g = new

Hello, I have installed libguestfs on RHEL 5.5 64 bit. 3 packages i have installed. libguestfs-tools-c-1.9.10-1.1 libguestfs-tools-1.9.10-1.1 libguestfs-1.9.10-1.1 When i am trying to run virt-resize it gives me error: virt-resize -expand /dev/sda1 vm01.scilab vm01.scilab-15GB -d libguestfs: trace: add_drive_opts "vm01.scilab" "readonly:true" libguestfs: trace:

(This bug was found by Matthew Booth during routine code review) We found a security issue which affects libguestfs programs in some circumstances. Since we don't pass the disk format through to qemu, a malicious guest backed by raw-format storage might craft a qcow2 header into its own disk. QEmu would interpret this, and qcow2 offers a wide range of features such as accessing arbitrary

This short patch series fixes various problems with the Java bindings, including enabling support for functions that return hash tables (returned as Map<String,String>). With this, the Java bindings are improved although still not perfect. The last remaining issue is to implement support for functions that take optional arguments. Rich. -- Richard Jones, Virtualization Group, Red Hat

This patch series implements user cancellation. What this means is that the "user" (or any library caller) can cancel certain long-running operations. Currently it is only possible to cancel upload and download operations (ie. anything in the generator which uses FileIn and FileOut). The mechanism in the protocol to implement cancellation already exists, and it is already used to

I have a 15G qcow2 xp vm with only 1 partition: -rw-------. 1 root root 10514137088 Sep 12 11:10 XP.img I want to resize it to 20G. So I : virsh vol-create-as --format raw windows XP-new-20G.img 20G Vol XP-new-20G.img created -rw-------. 1 root root 21474836480 Sep 12 13:17 XP-new-20G.img But: virt-resize --expand /dev/sda1 XP.img XP-new-20G.img Summary of changes: /dev/sda1: partition will

The more I look at this patch, the less I like it. I would summarise why I think it's wrong here, but it's better if you look at the message I posted on the gnulib mailing list here first: http://lists.gnu.org/archive/html/bug-gnulib/2009-11/msg00434.html Directly accessing errno on Windows is wrong: you won't see the true reasons for an error by doing that. However depending on

The current guestfs_find API call contains an undocumented limit: It needs to marshall the whole list of filenames into a single protocol message. Unfortunately just about any Linux guest breaks this limit if you try 'guestfs_find ("/")' so this isn't much use. These patches add a new API call (find0) which breaks this limit by using a FileOut parameter. It's slightly

-- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://et.redhat.com/~rjones/virt-top

NOT a problem, just a question about distro checking: the default value is REDHAT, then you check debian (or ubuntu) and then archlinux why are you using two if statements ? -- Evaggelos Balaskas - Unix System Engineer http://gr.linkedin.com/in/evaggelosbalaskas

These patches are a distillation of the good patches from the previous large / for-discussion-only error handling patch. See: https://www.redhat.com/archives/libguestfs/2009-November/msg00298.html Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-df lists disk usage of guests without needing to install any software inside the virtual machine.

--- lib/hivex.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/lib/hivex.c b/lib/hivex.c index 13d7556..8a774de 100644 --- a/lib/hivex.c +++ b/lib/hivex.c @@ -543,6 +543,9 @@ hivex_close (hive_h *h) free (h->filename); free (h); + if (h->msglvl >= 1) + fprintf (stderr, "hivex_close\n"); + return r; } -- 1.7.2.1

This patch series adds support for outputing an ext2-based appliance from febootstrap-supermin-helper. The usage is very simple, you just add '-f ext2' flag and the name of the appliance file that you want to write to. The implementation uses libext2fs, which is a very low level way to create ext2 filesystems from scratch. We'd like to use libguestfs, but that's an obvious

--- capitests/Makefile.am | 4 ++- capitests/check-noexec-stack.pl | 58 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 61 insertions(+), 1 deletions(-) create mode 100755 capitests/check-noexec-stack.pl diff --git a/capitests/Makefile.am b/capitests/Makefile.am index 71928ec..08466ac 100644 --- a/capitests/Makefile.am +++ b/capitests/Makefile.am @@ -22,13 +22,15 @@

This is a set of bugfixes and enhancements to allow virt-resize to really expand Linux and Windows guests. Previously there were lots of bugs. This version has been tested on a variety of guests successfully. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages.

We?ve been seeing this a lot lately on generic CentOS 6 rpm installs: rpm -qa | grep libguestfs libguestfs-java-1.16.19-1.el6.x86_64 libguestfs-java-devel-1.16.19-1.el6.x86_64 libguestfs-1.16.19-1.el6.x86_64 libguestfs-tools-1.16.19-1.el6.x86_64 libguestfs-javadoc-1.16.19-1.el6.x86_64 libguestfs-devel-1.16.19-1.el6.x86_64 libguestfs-tools-c-1.16.19-1.el6.x86_64