moby/volume
Yong Tang c90ec05175 Restrict checkpoint name to prevent directory traversal
This fix tries to address the issue raised in 28769 where
checkpoint name was not checked before passing to containerd.
As a result, it was possible to use a special checkpoint name
to get outside of the container's directory.

This fix add restriction `[a-zA-Z0-9][a-zA-Z0-9_.-]+` (`RestrictedNamePattern`).
This is the same as container name restriction.

This fix fixes 28769.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
2016-11-23 13:23:07 -08:00
..
drivers Update plugingetter import path in docker/docker. 2016-10-11 11:24:18 -07:00
local Restrict checkpoint name to prevent directory traversal 2016-11-23 13:23:07 -08:00
store fix gofmt in master 2016-11-18 15:20:19 -08:00
testutils test: fix trivial code convention noncompliance 2016-09-12 07:36:52 +00:00
validate.go api: fix ReadOnly support for tmpfs 2016-11-08 06:49:17 +00:00
validate_test.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
validate_test_unix.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
validate_test_windows.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume.go Fix uneccessary calls to volume.Unmount() 2016-11-10 14:04:08 -05:00
volume_copy.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_copy_unix.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_copy_windows.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_linux.go Use container Mounts API for Swarm containers. 2016-11-22 13:23:51 -05:00
volume_linux_test.go api: fix ReadOnly support for tmpfs 2016-11-08 06:49:17 +00:00
volume_propagation_linux.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_propagation_linux_test.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_propagation_unsupported.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_test.go Fix several issues with go vet and go fmt 2016-11-17 06:31:28 -08:00
volume_unix.go Add new HostConfig field, Mounts. 2016-09-13 09:55:35 -04:00
volume_unsupported.go api: fix ReadOnly support for tmpfs 2016-11-08 06:49:17 +00:00
volume_windows.go Windows: Remove TP5 support from volume 2016-09-21 11:03:19 -07:00