@Martin, about the issue you bring up in comment #53:
There are some earlier known 'qemu-img info' system exhaustion attacks, so we run those commands in a context where a timeout and max available memory (I think) are specified, so we should already be protected against this kind of exploit.
@Martin, about the issue you bring up in comment #53:
There are some earlier known 'qemu-img info' system exhaustion attacks, so we run those commands in a context where a timeout and max available memory (I think) are specified, so we should already be protected against this kind of exploit.