Comment 9 for bug 1415087
Revision history for this message
| Andrew Laski (alaski) wrote Re: Format-guessing and file disclosure in image convert | #9 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0e1f616
(Get the code!)
Tony has agreed to look into this from the Nova side after he finishes up some other work he's doing.
Looking through the Nova code it seems that all of our uses of qemu-img create pass -f and an input format. Is this exploitable with just -O being left off?