similar to: CVE-2010-3851: Patch to the generated code

1/8 generator: Rearrange argt logically (RHBZ#642934,CVE-2010-3851). 2/8 generator: Optional arguments, add-drive-opts (RHBZ#642934,CVE-2010-3851). These two previously posted. 3/8 fish: Specify format of disks (RHBZ#642934,CVE-2010-3851). Updates to guestfish to add the --format option and to make -d copy the format from libvirt. 4/8 fuse: Specify format of disks (RHBZ#642934,CVE-2010-3851).

Version 1.5.23 contains the fix. Fedora 14 users, please test this package and vote it up if it works for you: https://admin.fedoraproject.org/updates/libguestfs-1.5.23-1 Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries

These two patches implement the first (and hardest) part of the fix for CVE-2010-3851. This adds a way to specify the format when adding a drive, avoiding qemu's auto-detection. In order to avoid an explosion of different add_drive_* functions (we have 4 already), we have implemented a way to specify optional arguments to functions, so all we need is a single new 'add_drive_opts'

Add the email address for authors. It will be better. Signed-off-by: Wanlong Gao <gaowanlong at cn.fujitsu.com> --- AUTHORS | 48 ++++++++++++++++++++++++------------------------ 1 files changed, 24 insertions(+), 24 deletions(-) diff --git a/AUTHORS b/AUTHORS index 0d6fb3c..702de5d 100644 --- a/AUTHORS +++ b/AUTHORS @@ -1,24 +1,24 @@ -Angus Salkeld -Ani Peter -Charles Duffy -Daniel

I'm pleased to announce the next release of hivex, a library and some tools for reading and writing Windows Registry hive files. Man page: http://libguestfs.org/hivex.3.html Source: http://libguestfs.org/download/hivex/ Git repo: http://git.annexia.org/?p=hivex.git;a=summary Fedora pkg: http://koji.fedoraproject.org/koji/taskinfo?taskID=3267857 This release mainly contains bug fixes.

The changelog action needs to checkout git2cl as a submodule. For some reason, when called through the Git module, command('submodule', 'update') was doing something unfathomable, and different to just calling 'git submodule update'. As Git is just a command line wrapper anyway, I've sidestepped this by just calling the command directly. --- Build.PL | 18

(This bug was found by Matthew Booth during routine code review) We found a security issue which affects libguestfs programs in some circumstances. Since we don't pass the disk format through to qemu, a malicious guest backed by raw-format storage might craft a qcow2 header into its own disk. QEmu would interpret this, and qcow2 offers a wide range of features such as accessing arbitrary

This merely enforces (wrt gnulib) the existing convention that libguestfs is covered by LGPLv2+ . >From 99a8fab0fa0474b4ab3959a5bd5867779a1d08d6 Mon Sep 17 00:00:00 2001 From: Jim Meyering <meyering at redhat.com> Date: Mon, 26 Oct 2009 16:01:06 +0100 Subject: [PATCH libguestfs] build: tell gnulib-tool that this is an lgplv2+ library * bootstrap: Invoke gnulib-tool with --lgpl=2. ---

Signed-off-by: Wanlong Gao <gaowanlong at cn.fujitsu.com> --- .mailmap | 13 +++++++++++++ AUTHORS | 4 ++-- Makefile.am | 5 +---- 3 files changed, 16 insertions(+), 6 deletions(-) create mode 100644 .mailmap diff --git a/.mailmap b/.mailmap new file mode 100644 index 0000000..504fd79 --- /dev/null +++ b/.mailmap @@ -0,0 +1,13 @@ +Jim Meyering <meyering at redhat.com>

I spent the last couple of days rethinking how we go about building the appliance, and the difficulties we have porting that to other Linux distros. I've come up with a much better way that works better and faster on (so far) Fedora and Debian (probably on Ubuntu too, not tried it), and should be much simpler to port to other distros. The current way is to do: +------------------+

These patches are a distillation of the good patches from the previous large / for-discussion-only error handling patch. See: https://www.redhat.com/archives/libguestfs/2009-November/msg00298.html Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-df lists disk usage of guests without needing to install any software inside the virtual machine.

syntax-check failed with this: fuse/guestmount.c:364: free ((char *) r); maint.mk: don't cast free argument make: *** [sc_cast_of_argument_to_free] Error 1 >From ed007e673b00ec545fcff2a708a57d98075c6460 Mon Sep 17 00:00:00 2001 From: Jim Meyering <meyering at redhat.com> Date: Mon, 9 Nov 2009 15:06:36 +0100 Subject: [PATCH libguestfs] avoid "syntax-check"

With these, I was able to compile guestfish. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-p2v converts physical machines to virtual machines. Boot with a live CD or over the network (PXE) and turn machines into Xen guests. http://et.redhat.com/~rjones/virt-p2v

This is a set of bugfixes and enhancements to allow virt-resize to really expand Linux and Windows guests. Previously there were lots of bugs. This version has been tested on a variety of guests successfully. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages.

This patch series adds support for outputing an ext2-based appliance from febootstrap-supermin-helper. The usage is very simple, you just add '-f ext2' flag and the name of the appliance file that you want to write to. The implementation uses libext2fs, which is a very low level way to create ext2 filesystems from scratch. We'd like to use libguestfs, but that's an obvious

Patches 1-6 are general code quality improvements. Note that Guido previously asked us for the ability to build libguestfs without building the appliance. Patches 7-10 are specific to Mac OS X, but shouldn't break the build for existing platforms. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones libguestfs lets you edit virtual machines. Supports

This series of patches prepares the way for a later series which will add write support for Windows Registry 'hive' files to our 'hivex' mini library. About hivex: http://libguestfs.org/hivex.3.html About the Windows Registry: Forget it - there are no reliable references. However the Wikipedia page explains some of the top level concepts:

This set adds support for recursively deleting a node and everything under it (ie. all subkeys, values, SKs etc). I've checked this works, both using my own reverse-engineering tools and using Windows 7 regedit. Example: $ hivexsh -w <<EOF load software cd \Microsoft del commit EOF Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora

These patches first make src/ warning free, and then turn on the strict warning options. 75 0001-build-suppress-an-ignored-write-return-value-warning.patch 38 0002-build-suppress-an-ignored-dup-return-value-warning.patch 27 0003-generator.ml-suppress-signed-unsigned-compare-warnin.patch 48 0004-build-don-t-perform-arithmetic-on-void-pointers.patch 30

As outlined here: https://www.redhat.com/archives/libguestfs/2009-November/msg00171.html These patches fix some of the simpler things. Some of the things (the missing headers) are genuine bugs. Note in order to cross-compile at all you have to comment out the section in the daemon/configure.ac where it detects custom format specifiers. Rich. -- Richard Jones, Virtualization Group, Red Hat