Re: [PULL 4/4] block: Parse filenames only when explicitly requested

[Michael Tokarev]

02.07.2024 19:39, Kevin Wolf wrote:
> When handling image filenames from legacy options such as -drive or from
> tools, these filenames are parsed for protocol prefixes, including for
> the json:{} pseudo-protocol.
>
> This behaviour is intended for filenames that come directly from the
> command line and for backing files, which may come from the image file
> itself. Higher level management tools generally take care to verify that
> untrusted images don't contain a bad (or any) backing file reference;
> 'qemu-img info' is a suitable tool for this.
>
> However, for other files that can be referenced in images, such as
> qcow2 data files or VMDK extents, the string from the image file is
> usually not verified by management tools - and 'qemu-img info' wouldn't
> be suitable because in contrast to backing files, it already opens these
> other referenced files. So here the string should be interpreted as a
> literal local filename. More complex configurations need to be specified
> explicitly on the command line or in QMP.
>
> This patch changes bdrv_open_inherit() so that it only parses filenames
> if a new parameter parse_filename is true. It is set for the top level
> in bdrv_open(), for the file child and for the backing file child. All
> other callers pass false and disable filename parsing this way.

I'm attaching backports of this change to 8.2 and 7.2 series.

Please check if the resulting backports are correct, or if they're needed
in the first place.  Note: 7.2 lacks quite some locking in this area, eg
v8.0.0-2069-g8394c35ee148 "block: Fix AioContext locking in bdrv_open_child()"
v8.2.0-rc0-59-g6bc0bcc89f84 "block: Fix deadlocks in bdrv_graph_wrunlock()".

Thanks,

/mjt

--
GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24.
New key: rsa4096/61AD3D98ECDF2C8E  9D8B E14E 3F2A 9DD7 9199  28F1 61AD 3D98 
ECDF 2C8E
Old key: rsa2048/457CE0A0804465C5  6EE1 95D1 886E 8FFB 810D  4324 457C E0A0 
8044 65C5
Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt

7ead946998-7.2.patch
Description: Text Data

7ead946998-8.2.patch
Description: Text Data