dilim/buildkit
1
0
Fork 0
mirror of https://github.com/moby/buildkit.git synced 2026-08-09 17:18:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
587d308bea51cb2c49f85eee3c05902a415a3f31
buildkit/executor
History
Tonis Tiigi 408266e4ba user: limit size of parsed passwd/group files 
Resolving a username to uid/gid read /etc/passwd and /etc/group via
os.Open with no upper bound, letting a crafted image force unbounded
memory use during user resolution. Cap reads at 10MiB and reject
non-regular files in both the OCI executor and the chown user resolver.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 83cfc1e0ea1dcf8816f259ee6720b8694ab874e5)
2026-06-24 10:56:53 -07:00
..
containerdexecutor
Revert "executor: fix containerd stdin close race"
2026-06-10 18:25:51 +02:00
oci
user: limit size of parsed passwd/group files
2026-06-24 10:56:53 -07:00
resources
ci: update golangci to v2.8.0
2026-01-13 22:09:20 -08:00
runcexecutor
network: split exec proxy from net mode
2026-06-09 09:11:33 -07:00
containerid_test.go
executor: validate container IDs centrally
2026-03-25 08:14:29 -07:00
containerid.go
executor: validate container IDs centrally
2026-03-25 08:14:29 -07:00
executor.go
network: split exec proxy from net mode
2026-06-09 09:11:33 -07:00
proxyca_linux_test.go
test: cover proxy network source conversion
2026-06-04 11:23:03 -07:00
proxyca_linux.go
solver: add proxy network mode
2026-06-04 11:23:00 -07:00
proxyca_unsupported.go
solver: add proxy network mode
2026-06-04 11:23:00 -07:00
stubs.go
golangci-lint: v2 upgrade
2025-05-02 12:19:17 -07:00