Skip to content
Commit 9bb99a82 authored by G. Campana's avatar G. Campana Committed by Will Deacon
Browse files

kvmtool: 9p: fix path traversal vulnerabilities



A path traversal exists because the guest can send "../" sequences to
the host 9p handlers. To fix this vulnerability, we ensure that path
components sent by the guest don't contain "../" sequences.

Signed-off-by: default avatarG. Campana <gcampana+kvm@quarkslab.com>
Signed-off-by: default avatarWill Deacon <will.deacon@arm.com>
parent 1cd6f516
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment