mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 10:11:27 +01:00
Alejandro Vallejo
990e65c3ad
This is work required in order to let pygrub operate in highly deprivileged chroot mode. This patch adds a function that preloads every plugin, hence ensuring that a on function exit, every shared library is loaded in memory. The new "init" function is supposed to be used before depriv, but that's fine because it's not acting on untrusted data. This is part of XSA-443 / CVE-2023-34325 Signed-off-by: Alejandro Vallejo <alejandro.vallejo@cloud.com>
40 lines
585 B
Plaintext
40 lines
585 B
Plaintext
libfsimage.so.1.0 {
|
|
global:
|
|
fsi_init;
|
|
fsi_open_fsimage;
|
|
fsi_close_fsimage;
|
|
fsi_file_exists;
|
|
fsi_open_file;
|
|
fsi_close_file;
|
|
fsi_read_file;
|
|
fsi_pread_file;
|
|
fsi_bootstring_alloc;
|
|
fsi_bootstring_free;
|
|
fsi_fs_bootstring;
|
|
|
|
fsip_fs_set_data;
|
|
fsip_file_alloc;
|
|
fsip_file_free;
|
|
fsip_fs;
|
|
fsip_fs_data;
|
|
fsip_fs_offset;
|
|
fsip_file_data;
|
|
|
|
fsig_init;
|
|
fsig_devread;
|
|
fsig_substring;
|
|
fsig_log2;
|
|
fsig_fs_buf;
|
|
fsig_file_alloc;
|
|
fsig_file_buf;
|
|
fsig_filepos;
|
|
fsig_filemax;
|
|
fsig_int1;
|
|
fsig_int2;
|
|
fsig_errnum;
|
|
fsig_disk_read_junk;
|
|
|
|
local:
|
|
*;
|
|
};
|