Re: [PATCH] virtiofsd: fix libfuse information leaks

2019-11-22 Thread Dr. David Alan Gilbert
* Stefan Hajnoczi (stefa...@redhat.com) wrote: > Some FUSE message replies contain padding fields that are not > initialized by libfuse. This is fine in traditional FUSE applications > because the kernel is trusted. virtiofsd does not trust the guest and > must not expose uninitialized memory. >

Re: [PATCH] virtiofsd: fix libfuse information leaks

2019-11-22 Thread Philippe Mathieu-Daudé
On 11/22/19 12:31 PM, Stefan Hajnoczi wrote: Some FUSE message replies contain padding fields that are not initialized by libfuse. This is fine in traditional FUSE applications because the kernel is trusted. virtiofsd does not trust the guest and must not expose uninitialized memory. Use C str

[PATCH] virtiofsd: fix libfuse information leaks

2019-11-22 Thread Stefan Hajnoczi
Some FUSE message replies contain padding fields that are not initialized by libfuse. This is fine in traditional FUSE applications because the kernel is trusted. virtiofsd does not trust the guest and must not expose uninitialized memory. Use C struct initializers to automatically zero out memo