mirror of
https://github.com/lima-vm/lima.git
synced 2026-10-28 11:44:35 +08:00
nashit hayyat
b1ead12bc3
Convert only rejected a backing file and AcceptableAsBaseDisk missed the qcow2 external data file, so qemu-img could read an attacker-chosen host path into the guest disk. Route both through one helper that also covers VMDK extents, matching what the native converter already enforces. Signed-off-by: nashit hayyat <nashit@bugqore.com>