c90ec05175
This fix tries to address the issue raised in 28769 where checkpoint name was not checked before passing to containerd. As a result, it was possible to use a special checkpoint name to get outside of the container's directory. This fix add restriction `[a-zA-Z0-9][a-zA-Z0-9_.-]+` (`RestrictedNamePattern`). This is the same as container name restriction. This fix fixes 28769. Signed-off-by: Yong Tang <yong.tang.github@outlook.com> |
||
---|---|---|
.. | ||
drivers | ||
local | ||
store | ||
testutils | ||
validate.go | ||
validate_test.go | ||
validate_test_unix.go | ||
validate_test_windows.go | ||
volume.go | ||
volume_copy.go | ||
volume_copy_unix.go | ||
volume_copy_windows.go | ||
volume_linux.go | ||
volume_linux_test.go | ||
volume_propagation_linux.go | ||
volume_propagation_linux_test.go | ||
volume_propagation_unsupported.go | ||
volume_test.go | ||
volume_unix.go | ||
volume_unsupported.go | ||
volume_windows.go |