[Libvirt-ci] Still Failing: libvirt/libvirt#832 (master - bc251ea)

Travis CI builds at travis-ci.org
Thu Jan 18 16:50:01 UTC 2018


Build Update for libvirt/libvirt
-------------------------------------

Build: #832
Status: Still Failing

Duration: 22 minutes and 10 seconds
Commit: bc251ea (master)
Author: Daniel P. Berrange
Message: qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)

We read from QEMU until seeing a \r\n pair to indicate a completed reply
or event. To avoid memory denial-of-service though, we must have a size
limit on amount of data we buffer. 10 MB is large enough that it ought
to cope with normal QEMU replies, and small enough that we're not
consuming unreasonable mem.

Signed-off-by: Daniel P. Berrange <berrange at redhat.com>

View the changeset: https://github.com/libvirt/libvirt/compare/ff609286a771...bc251ea91bcf

View the full build log and details: https://travis-ci.org/libvirt/libvirt/builds/330266496?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvirt-ci/attachments/20180118/8489f5e2/attachment.htm>


More information about the Libvirt-ci mailing list