)]}'
{
  "commit": "043e127a126bb3ceb5fc753deee27d261fd0c5ce",
  "tree": "d46031e527c6137973353582c1f33b530541f395",
  "parents": [
    "633487df8d303b37a88584d5a57a39dbcd91c7bf"
  ],
  "author": {
    "name": "Albert Esteve",
    "email": "aesteve@redhat.com",
    "time": "Mon Feb 19 15:34:19 2024 +0100"
  },
  "committer": {
    "name": "Michael S. Tsirkin",
    "email": "mst@redhat.com",
    "time": "Tue Mar 12 17:56:55 2024 -0400"
  },
  "message": "hw/virtio: check owner for removing objects\n\nShared objects lack spoofing protection.\nFor VHOST_USER_BACKEND_SHARED_OBJECT_REMOVE messages\nreceived by the vhost-user interface, any backend was\nallowed to remove entries from the shared table just\nby knowing the UUID. Only the owner of the entry\nshall be allowed to removed their resources\nfrom the table.\n\nTo fix that, add a check for all\n*SHARED_OBJECT_REMOVE messages received.\nA vhost device can only remove TYPE_VHOST_DEV\nentries that are owned by them, otherwise skip\nthe removal, and inform the device that the entry\nhas not been removed in the answer.\n\nSigned-off-by: Albert Esteve \u003caesteve@redhat.com\u003e\nAcked-by: Stefan Hajnoczi \u003cstefanha@redhat.com\u003e\nMessage-Id: \u003c20240219143423.272012-2-aesteve@redhat.com\u003e\nReviewed-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nReviewed-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d1ed39dfa0c8599616ee3835d34a8f09205efb9f",
      "old_mode": 33188,
      "old_path": "docs/interop/vhost-user.rst",
      "new_id": "d8419fd2f17e202e6c7c3995234eabf2b1cebc68",
      "new_mode": 33188,
      "new_path": "docs/interop/vhost-user.rst"
    },
    {
      "type": "modify",
      "old_id": "a1eea8547e966673536c14a5922071df6cb4f4eb",
      "old_mode": 33188,
      "old_path": "hw/virtio/vhost-user.c",
      "new_id": "9d654efd3d5a45eef9cc3814c5ac7d75f2159444",
      "new_mode": 33188,
      "new_path": "hw/virtio/vhost-user.c"
    }
  ]
}