xapi-project
/
xen-api
/
25064136504
/
1
80%
master: 80%
master: 80%
|
Ran
|
Files
34
|
Run time
2s
|
Badge
Embed ▾
README BADGES
|
coverage: 80.459%. Remained the same
push
github
web-flowxapi_vm: Implement RBAC checking for keys in `VM.other_config` and `VM.platform` (#7039) Add per-key RBAC checking for `VM.platform` and `VM.other_config`, to cover a case where a lower-prileged user could circumvent permission checks on `other_config:{pci,hvm_serial}` and `platform:hvm_serial`. Introduces a generic per-key RBAC checker for map setters based on Task's manual RBAC checker (introduced in https://github.com/xapi-project/xen-api/commit/a3f2c6e8f). Uses it for the fields above. This is part of XSA-489 / CVE-2026-23562 and CVE-2026-42486
3504 of 4355 relevant lines covered (80.46%)
0.8 hits per line
