Am 09.08.24 um 12:17 schrieb Fiona Ebner:
> diff --git a/PVE/QemuMigrate.pm b/PVE/QemuMigrate.pm
> index e71face4..7a7183e0 100644
> --- a/PVE/QemuMigrate.pm
> +++ b/PVE/QemuMigrate.pm
> @@ -1095,7 +1095,8 @@ sub phase2 {
>       die "only UNIX sockets are supported for remote migration\n"
>           if $tunnel_info->{proto} ne 'unix';
>  
> -     my $remote_socket = $tunnel_info->{addr};
> +     my ($remote_socket) = $tunnel_info->{addr} =~ 
> m!^(/run/qemu-server/.*\.migrate)$! #untaint

I sent a v2 to rule out "../" in the regex:
https://lists.proxmox.com/pipermail/pve-devel/2024-August/065075.html


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to