Comment 45 for bug 1996188

Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote : Re: Arbitrary file access through custom VMDK flat descriptor

Arnaud, thanks for all the testing. I was trying to keep the backing file check and the vmdk checks close together, but while there are legitimate internal cinder uses for a backing file, there aren't any legitimate uses of a vmdk with one of the disallowed formats, so I took your advice and added a vmdk check to convert_image. (I left the current checks even though they're not strictly necessary now because they allow an image_id to appear in the error message.)