Bug 490843
| Summary: | Spaces in Volume Name cause problems creating Live USB Image | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Rodd Clarkson <rodd> | ||||||
| Component: | liveusb-creator | Assignee: | kushaldas@gmail.com <mail> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | high | Docs Contact: | |||||||
| Priority: | high | ||||||||
| Version: | 12 | CC: | dmaphy, lmacken, mail, nickysn, pv.bugzilla, redhat-bugzilla, security-response-team | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | 3.8.6-1.fc11 | Doc Type: | Bug Fix | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2009-11-20 05:10:41 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Rodd Clarkson
2009-03-18 10:02:39 UTC
I have detected the same issue here with liveusb-creator-3.6.5-2.fc10.noarch. I will attach two files including the output of liveusb-creator (liveusb-creator-output.txt) and the liveusb-creator.log. Created attachment 340147 [details]
output of liveusb-creator
Created attachment 340148 [details]
liveusb-creator.log
Well, the sys.popen() (as the current implementation uses) doesn't seem to be very sane. According to http://www.python.org/dev/peps/pep-0324/, there are many better ways to do such things. And just doing '%s' will not solve your problems, as really any character can show up in the label name of a volume - including space, comma and quotations (all of them I've already seen in the real life unluckily). If a label of a medium would be " ; rm -rf /; " (without the ""), that even would cause damage. Thus this is IMHO considered to be a security issue... I discovered that installing Fedora 12 Beta (F12-Beta-i686-Live.iso) with liveusb-creator-3.7.1 under Windows XP on a usb flash drive that contains spaces in its volume name creates an image, that fails to boot. After attempting to boot from the usb drive, the following message appears: No root device found No root device found Boot has failed, sleeping forever. Fedora 11 (Fedora-11-i686-Live.iso) boots fine, but it seems that it fails to find its persistent overlay, so the changes to the file system are lost after reboot, even if you did create a persistent overlay. The created syslinux.cfg (for Fedora 12 Beta) file contains the following kernel parameters: label linux0 menu label Boot kernel vmlinuz0 append initrd=initrd0.img root=live:LABEL=USB_DISK rootfstype=vfat rw liveimg overlay=LABEL=USB_DISK quiet rhgb The volume name of the usb disk is "USB DISK". (In reply to comment #4) > Well, the sys.popen() (as the current implementation uses) doesn't seem to be > very sane. According to http://www.python.org/dev/peps/pep-0324/, there are > many better ways to do such things. And just doing '%s' will not solve your > problems, as really any character can show up in the label name of a volume - > including space, comma and quotations (all of them I've already seen in the > real life unluckily). The liveusb-creator does not use sys.popen, and never has. (In reply to comment #6) > The liveusb-creator does not use sys.popen, and never has. robert@tux:~/liveusb-creator-3.7.3 > grep -r extlinux * liveusb/creator.py: os.path.join(syslinux_path, "extlinux.conf")) liveusb/creator.py: self.popen('extlinux -i %s' % syslinux_path) robert@tux:~/liveusb-creator-3.7.3 > Whatever *.popen is used - it's still a broken implementation and spaces still seem to cause trouble. liveusb-creator-3.8.6-1.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/liveusb-creator-3.8.6-1.fc12 liveusb-creator-3.8.6-1.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/liveusb-creator-3.8.6-1.fc11 Hm, bug still occurs for me with liveusb-creator-3.8.6 (running under Windows). No persistent overlay with Fedora 11. No root device found with Fedora 12 RC4 (from http://alt.fedoraproject.org/pub/alt/stage/12-RC.4/Fedora-12-i686-Live/) liveusb-creator-3.8.6-1.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update liveusb-creator'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2009-11209 liveusb-creator-3.8.6-1.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update liveusb-creator'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-11232 This message is a reminder that Fedora 10 is nearing its end of life. Approximately 30 (thirty) days from now Fedora will stop maintaining and issuing updates for Fedora 10. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as WONTFIX if it remains open with a Fedora 'version' of '10'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version prior to Fedora 10's end of life. Bug Reporter: Thank you for reporting this issue and we are sorry that we may not be able to fix it before Fedora 10 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora please change the 'version' of this bug to the applicable version. If you are unable to change the version, please add a comment here and someone will do it for you. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. The process we are following is described here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping Bumping to 12 as it's been reported to occur there. liveusb-creator-3.8.6-1.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report. liveusb-creator-3.8.6-1.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report. Problems still persist. Attempted to create a live boot/install usb for fedora 13 x86_64 using liveusb-creator (no error messages given) 3.9.1 Release : 1.fc12 Boot options menu appears on keystroke Memory test works fine. "Boot" goes through the boot process filling the teardrop and then No root device found Boot has failed, sleeping forever. |