commit 120b721f5b590393971673a315f02969ec89cccb
author Samuel Thibault <samuel.thibault@ens-lyon.org> Sun Sep 29 20:08:20 2019 +0200
committer Samuel Thibault <samuel.thibault@ens-lyon.org> Tue Oct 01 19:03:08 2019 +0200
tree effb500d79924985c998c536fd7cb87e6e8b24f1
parent 860d9048c78ce59c5903c3d5209df56f38400986

slirp: Allow non-local DNS address when restrict is off

This can be used to set a DNS server to be used by the guest which is
different from the one configured on the host.

Buglink: https://bugs.launchpad.net/qemu/+bug/1010484
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Thomas Huth <thuth@redhat.com>

net/slirp.c

diff --git a/net/slirp.c b/net/slirp.c
index f42f496..c4334ee 100644
--- a/net/slirp.c
+++ b/net/slirp.c
@@ -456,7 +456,7 @@
         error_setg(errp, "Failed to parse DNS");
         return -1;
     }
-    if ((dns.s_addr & mask.s_addr) != net.s_addr) {
+    if (restricted && (dns.s_addr & mask.s_addr) != net.s_addr) {
         error_setg(errp, "DNS doesn't belong to network");
         return -1;
     }
@@ -522,7 +522,7 @@
             error_setg(errp, "Failed to parse IPv6 DNS");
             return -1;
         }
-        if (!in6_equal_net(&ip6_prefix, &ip6_dns, vprefix6_len)) {
+        if (restricted && !in6_equal_net(&ip6_prefix, &ip6_dns, vprefix6_len)) {
             error_setg(errp, "IPv6 DNS doesn't belong to network");
             return -1;
         }