[Libvirt-cim] [PATCH] Make cu_compare_ref() also compare the actual classname of the ref and inst
Heidi Eckhart
heidieck at linux.vnet.ibm.com
Tue Nov 13 12:40:46 UTC 2007
Dan Smith wrote:
> This makes cu_compare_ref() assist association providers in avoiding
> carefully crafted instances to fool the dispatch code. For example,
> in HostedResourcePool, it (now) uses cu_compare_ref() to make sure the
> client specified a valid HostSystem, but since ComputerSystem is a
> CIM_System, if you pass ComputerSystem.Name="<hostname_of_system>",
> HostedResourcePool would validate Name and proceed.
>
A very good catch :) !
--
Regards
Heidi Eckhart
Software Engineer
Linux Technology Center - Open Hypervisor
heidieck at linux.vnet.ibm.com
**************************************************
IBM Deutschland Entwicklung GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschaeftsfuehrung: Herbert Kircher
Sitz der Gesellschaft: Boeblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294
More information about the Libvirt-cim
mailing list