ports/129417: emulators/qemu savevm/loadvm broken by patch

[Nate Eldredge]

>Number:         129417
>Category:       ports
>Synopsis:       emulators/qemu savevm/loadvm broken by patch
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 04 11:30:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Nate Eldredge
>Release:        FreeBSD 7.0-RELEASE-p5 amd64
>Organization:
>Environment:
System: FreeBSD vulcan.lan 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #14: Sun Oct 5 11:20:57 PDT 2008 nate at vulcan.lan:/usr/obj/usr/src/sys/VULCAN amd64


	
>Description:
The savevm/loadvm feature of qemu[-devel] doesn't work with qemu 0.9.1 from
ports.  savevm appears to succeed, but a subsequent loadvm fails with
"Error -1 while loading VM state".

It appears to have been broken by patch-CVE-2008-0928.  Reverting this
patch for qemu-devel makes it work again.  (I didn't try vanilla qemu
but suspect it is the same.)  The patch in question is security
related, but in my case the guest OS is trusted.  A better solution
should be found which is more secure.

There is some relevant info here: 
http://www.mail-archive.com/kvm@vger.kernel.org/msg01244.html


>How-To-Repeat:
savevm foo
loadvm foo
>Fix:
Workaround is to revert patch-CVE-2008-0928.  Proper fix will require
more work.




>Release-Note:
>Audit-Trail:
>Unformatted: