]> git.ipfire.org Git - thirdparty/libvirt.git/commit
virDomainDefParseXML: Check for malicious cpu ids in <numa/>
authorMichal Privoznik <mprivozn@redhat.com>
Fri, 7 Aug 2015 14:36:38 +0000 (16:36 +0200)
committerMichal Privoznik <mprivozn@redhat.com>
Fri, 7 Aug 2015 15:19:07 +0000 (17:19 +0200)
commit82af954c527e88111b05d50953b80eb4afde4d9a
tree78d65b256fa53a8d23519f145d8bf30dd1aded21
parent8f2535dec1fdd969e86aa39c8a2583c723341733
virDomainDefParseXML: Check for malicious cpu ids in <numa/>

https://bugzilla.redhat.com/show_bug.cgi?id=1176020

Some users think this is a good idea:

      <vcpu placement='static'>4</vcpu>
      <cpu mode='host-model'>
        <model fallback='allow'/>
        <numa>
          <cell id='0' cpus='0-1' memory='1048576' unit='KiB'/>
          <cell id='1' cpus='9-10' memory='2097152' unit='KiB'/>
        </numa>
      </cpu>

It's not. Lets therefore introduce a check and discourage them in
doing so.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
src/conf/domain_conf.c