1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
|
=head1 NAME
libnbd-release-notes-1.18 - release notes for libnbd 1.18
=head1 DESCRIPTION
These are the release notes for libnbd stable release 1.18.
This describes the major changes since 1.16.
libnbd 1.18.0 was released on B<27 September 2023>.
=head2 Security
Eric Blake found a case where a server could cause libnbd to crash,
although not in the normal libnbd configuration. For more information
see the announcement here:
L<https://listman.redhat.com/archives/libguestfs/2023-July/032035.html>
Eric Blake found an issue with L<nbd_get_size(3)> where a server that
returns a size E<gt> S<(uint64_t)INT64_MAX> and E<lt> S<(uint64_t)-1>
would cause nbd_get_size to return a negative number (which is not
C<-1> and so callers may or may not treat it as an error). While no
client code in libnbd itself is affected by this, it could affect
external clients. libnbd E<ge> 1.16.5 now returns an error (C<-1>)
and sets nbd_get_errno to C<EOVERFLOW> in this case. This was
assigned CVE-2023-5215 (low severity). See the announcement here:
L<https://listman.redhat.com/archives/libguestfs/2023-September/032711.html>
During routine fuzzing we found several security problems which had
been introduced during this development cycle and have subsequently
been fixed. Stable (even numbered) releases of libnbd should not be
vulnerable; do not use the development (odd numbered) releases in
production.
If you find a security issue, please read F<SECURITY> in the source
(online here:
L<https://gitlab.com/nbdkit/libnbd/blob/master/SECURITY>). To
find out about previous security issues in libnbd, see
L<libnbd-security(3)>.
=head2 New APIs
=over 4
=item L<nbd_block_status_64(3)>
=item L<nbd_aio_block_status_64(3)>
Make a 64 bit block status request, see L</Protocol> below (Eric Blake).
=item L<nbd_block_status_filter(3)>
=item L<nbd_aio_block_status_filter(3)>
Send filtered block status command, see L</Protocol> below (Eric
Blake).
=item L<nbd_can_block_status_payload(3)>
Find out if the server supports filtered block status command
(Eric Blake).
=item L<nbd_set_request_extended_headers(3)>
=item L<nbd_get_request_extended_headers(3)>
=item L<nbd_get_extended_headers_negotiated(3)>
=item L<nbd_opt_extended_headers(3)>
=item L<nbd_aio_opt_extended_headers(3)>
Set/get whether we request extended headers from the server, and find
out if we negotiated extended headers, see L</Protocol> below (Eric
Blake).
=back
=head2 Enhancements to existing APIs
C<"qemu:"> meta-context constants (eg. C<"qemu:dirty-bitmap"> as
C<LIBNBD_CONTEXT_QEMU_DIRTY_BITMAP>) are now available through the C,
Golang, OCaml and Python language bindings (Eric Blake).
L<nbd_shutdown(3)> now works correctly when in opt mode (Eric Blake).
L<nbd_set_strict_mode(3)> adds C<LIBNBD_STRICT_AUTO_FLAG> which allows
the client to test how servers behave when the payload length flag is
adjusted (Eric Blake).
=head2 Protocol
libnbd now supports NBD 64 bit "extended headers" and extent sizes.
In practice this allows certain requests such as zeroing very large
sections of the disk to be implemented much more efficiently, with
servers that support this (Eric Blake).
libnbd now supports filtered block status requests (Eric Blake).
=head2 Tools
L<nbdcopy(1)>, L<nbdinfo(1)> and L<nbddump(1)> have been expanded to
use and report NBD 64 bit / extended header support when the server
supports it (Eric Blake).
nbdinfo I<--has> can be used as an alias for I<--can>, eg.
S<C<nbdinfo --has structured-reply URI>> (Eric Blake).
nbdinfo makes the export size output optional, for servers which send
an oversized one (Eric Blake).
nbdcopy now supports "human sizes" for some parameters, eg.
S<C<nbdcopy --request-size=1M ...>>.
=head2 Language bindings
New Rust bindings. There is a basic API for ordinary use, and an
asynch API implemented using Tokio. S<Rust E<ge> 1.69> is required.
(Tage Johansson, supported by sponsorship from Google Summer of Code
2023, additional review and fixes by Eric Blake).
OCaml 5 is now supported.
Golang 1.21 is now supported. The minimum version is now 1.17 (Eric
Blake).
Use C<gofmt> to format Golang bindings (Eric Blake).
Use C<unsafe.Slice> when converting C arrays to Golang slices (Eric Blake).
All language bindings support NBD 64 bit / extended headers, and
examples of how to use this feature are available (Eric Blake).
=head2 Tests
Fix a couple of race conditions in tests where we did not fully
consume stdin in L<nbdkit-sh-plugin(3)> pwrite method (Eric Blake).
Fuzzing now disables client-side strictness checks, enabling a wider
range of inputs to be fuzzed (Eric Blake).
=head2 Other improvements and bug fixes
Consistently wrap source code at 80 columns (Laszlo Ersek).
Debug messages no longer print the very verbose state transitions
inside the state machine as these are not usually useful. You can
re-enable this by defining C<-DLIBNBD_STATE_VERBOSE=1> at compile time.
Completion C<.callback> methods are now always called exactly once,
and documentation is clearer on when this happens (Eric Blake).
=head2 Documentation
C<podwrapper> has a new I<--replace> parameter which makes it easier
to use C<AC_SUBST>-substitutions in documentation.
=head2 Build
Automake's C<subdir-objects> option is now used (Eric Blake).
Multiple, ongoing fixes to the CI tests (Eric Blake).
=head1 SEE ALSO
L<libnbd(3)>.
=head1 AUTHORS
=begin comment
git shortlog -s v1.16.0..
=end comment
=over 4
=item Eric Blake
=item Laszlo Ersek
=item Richard W.M. Jones
=item Tage Johansson
=back
=head1 COPYRIGHT
Copyright Red Hat
|
