From 0b79e98ccb1dd2d6500d4cfbc9a552f04d7d3a22 Mon Sep 17 00:00:00 2001 From: Alexandre Derumier Date: Mon, 27 May 2013 11:41:37 +0200 Subject: [PATCH] nexenta: nexenta_get_zvol_size : parse result to avoid tainted value Signed-off-by: Alexandre Derumier --- PVE/Storage/NexentaPlugin.pm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/PVE/Storage/NexentaPlugin.pm b/PVE/Storage/NexentaPlugin.pm index 857df54..93cd0cf 100644 --- a/PVE/Storage/NexentaPlugin.pm +++ b/PVE/Storage/NexentaPlugin.pm @@ -42,7 +42,10 @@ sub nexenta_request { sub nexenta_get_zvol_size { my ($scfg, $zvol) = @_; - return nexenta_request($scfg, 'get_child_prop', 'zvol', $zvol, 'size_bytes'); + my $ret = nexenta_request($scfg, 'get_child_prop', 'zvol', $zvol, 'size_bytes'); + $ret =~ m/^(\d+)$/ or die "size is not valid"; + my $size = $1; + return $size; } sub nexenta_get_zvol_props { -- 2.39.2