Sebastiaan van Stijn d8e4dfe7ed libnetwork/kvstore/boltdb: prevent integer overflow in allocation ...

Check the value length before calculating the buffer capacity to
prevent integer overflow when adding the metadata length.

Fixes potential allocation failures reported by CodeQL.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

2026-10-08 01:16:45 +02:00

..

bitmap

…

cluster

…

cmd

daemon/libnetwork: fix G703, G705 (gosec)

2026-09-18 22:59:37 +02:00

cnmallocator

daemon/libnetwork/*: use t.Context

2026-09-18 18:28:46 +02:00

config

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

datastore

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

diagnostic

daemon/libnetwork: fix G703, G705 (gosec)

2026-09-18 22:59:37 +02:00

discoverapi

…

docs

daemon/libnetwork: Document remote driver destination names

2026-08-26 21:14:57 +02:00

driverapi

libnetwork/driverapi: remove Driver.Type()

2026-10-06 14:33:44 -04:00

drivers

libnetwork/driverapi: remove Driver.Type()

2026-10-06 14:33:44 -04:00

drvregistry

libnetwork/driverapi: remove Driver.Type()

2026-10-06 14:33:44 -04:00

etchosts

libnetwork/etchosts: keep file open when updating hosts

2026-10-01 14:11:29 +02:00

internal

libnetwork: move kvstore out of internal

2026-10-02 16:31:27 -04:00

ipamapi

…

ipams

daemon/libnetwork/ipams: use t.Context

2026-09-18 18:28:45 +02:00

ipamutils

…

ipbits

…

iptables

iptables: inline Rule.ensure, and un-export Rule.exists

2026-09-14 22:07:55 +02:00

kvstore

libnetwork/kvstore/boltdb: prevent integer overflow in allocation

2026-10-08 01:16:45 +02:00

netlabel

…

netutils

…

networkdb

networkdb: use local Lamport clock

2026-09-28 16:20:45 +02:00

nlwrap

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

ns

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

options

go fix (GOOS=linux and windows)

2026-03-25 23:23:41 +01:00

osl

Merge pull request #53420 from corhere/overlay-refcounting-is-hard

2026-10-01 20:15:08 +02:00

portallocator

daemon/libnetwork/portallocator: skip kernel-reserved ports

2026-06-12 12:09:28 +02:00

portmapper

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

portmapperapi

…

portmappers

daemon/libnetwork/*: use t.Context

2026-09-18 18:28:46 +02:00

resolvconf

…

scope

…

support

daemon/libnetwork/support: refresh Dockerfile and script

2026-06-16 11:38:15 +02:00

testdata/TestUserChain

…

types

libnetwork: publish ephemeral ports on a joined endpoint

2026-08-07 18:00:05 -04:00

.dockerignore

…

.gitignore

…

agent_test.go

libnetwork: fix graceful service endpoint removal

2026-01-13 18:37:32 -05:00

agent.go

daemon/libnetwork: update go:generate import paths

2026-02-12 16:04:36 +01:00

agent.pb.go

…

agent.proto

…

controller_linux.go

libnetwork: expose proxy information in FirewallInfo

2026-04-25 16:22:09 +09:00

controller_others.go

…

controller.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

default_gateway_freebsd.go

…

default_gateway_linux.go

…

default_gateway_windows.go

…

default_gateway.go

libnetwork: don't run a resolver in LB sandboxes

2026-10-02 11:23:32 -04:00

drivers_linux.go

…

drivers_unsupported.go

…

drivers_windows.go

…

endpoint_cnt.go

…

endpoint_info_unix.go

…

endpoint_info_windows.go

…

endpoint_info.go

…

endpoint_store_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

endpoint_store.go

…

endpoint_test.go

…

endpoint_unix_test.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

endpoint.go

daemon/libnetwork: remove dnsnames migration code

2026-09-01 19:04:16 +02:00

error.go

…

errors_test.go

…

firewall_linux_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

firewall_linux.go

libnetwork: publish Swarm ingress ports via bridge port-publishing

2026-08-07 18:00:05 -04:00

firewall_others.go

…

libnetwork_internal_test.go

Merge pull request #53848 from corhere/sandbox-files-opt-in

2026-10-07 19:55:44 +02:00

libnetwork_linux_test.go

Merge pull request #53848 from corhere/sandbox-files-opt-in

2026-10-07 19:55:44 +02:00

libnetwork_unix_test.go

…

libnetwork_windows_test.go

…

network_store_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

network_store.go

…

network_unix.go

…

network_windows_test.go

…

network_windows.go

go fix (GOOS=linux and windows)

2026-03-25 23:23:41 +01:00

network.go

libnetwork: don't run a resolver in LB sandboxes

2026-10-02 11:23:32 -04:00

resolver_test.go

libn: wait for DNS server in TestDNSProxyServFail

2026-09-30 17:30:45 -04:00

resolver_unix_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

resolver_unix.go

…

resolver_windows.go

…

resolver.go

daemon/libnetwork: resolver: ignore gosec G404

2026-09-18 22:59:37 +02:00

sandbox_dns_unix_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

sandbox_dns_unix.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_dns_windows.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_externalkey_unix.go

…

sandbox_externalkey_unsupported.go

…

sandbox_linux.go

libnetwork: send neighbor advertisements on restore

2026-02-14 07:51:29 -08:00

sandbox_options.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_store.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_unix_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

sandbox_windows.go

libnetwork: send neighbor advertisements on restore

2026-02-14 07:51:29 -08:00

sandbox.go

libnetwork/etchosts: use moby/locker for path locks

2026-09-25 15:21:55 -04:00

service_common_unix_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

service_common.go

libnetwork: ref-count service aliases for VIP DNS records

2026-05-12 14:37:09 +02:00

service_linux_test.go

fix TestLoadBalancerSandboxHasNoResolver

2026-10-07 22:57:56 +02:00

service_linux.go

libnetwork: publish Swarm ingress ports via bridge port-publishing

2026-08-07 18:00:05 -04:00

service_unsupported.go

…

service_windows.go

…

service.go

daemon/libnetwork: portConfigs: fix QF1012 (staticcheck)

2026-09-18 22:59:37 +02:00

store_linux_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

store_test.go

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

store.go

daemon/libnetwork: Drop legacy network scope fallback

2026-08-05 14:41:03 +02:00