[Libvirt-cim] [PATCH] Make cu_compare_ref() also compare the actual classname of the ref and inst

Heidi Eckhart heidieck at linux.vnet.ibm.com
Tue Nov 13 12:40:46 UTC 2007


Dan Smith wrote:
> This makes cu_compare_ref() assist association providers in avoiding
> carefully crafted instances to fool the dispatch code.  For example,
> in HostedResourcePool, it (now) uses cu_compare_ref() to make sure the
> client specified a valid HostSystem, but since ComputerSystem is a
> CIM_System, if you pass ComputerSystem.Name="<hostname_of_system>",
> HostedResourcePool would validate Name and proceed.
>   
A very good catch :) !

-- 
Regards

Heidi Eckhart
Software Engineer
Linux Technology Center - Open Hypervisor

heidieck at linux.vnet.ibm.com

**************************************************
IBM Deutschland Entwicklung GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschaeftsfuehrung: Herbert Kircher
Sitz der Gesellschaft: Boeblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294




More information about the Libvirt-cim mailing list