1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/pkg/sysinfo
Justin Cormack f8e876d761
Fix denial of service with large numbers in cpuset-cpus and cpuset-mems
Using a value such as `--cpuset-mems=1-9223372036854775807` would cause
`dockerd` to run out of memory allocating a map of the values in the
validation code. Set limits to the normal limit of the number of CPUs,
and improve the error handling.

Reported by Huawei PSIRT.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-10-05 15:09:02 +02:00
..
numcpu.go Add canonical import comment 2018-02-05 16:51:57 -05:00
numcpu_linux.go Add canonical import comment 2018-02-05 16:51:57 -05:00
numcpu_windows.go Add canonical import comment 2018-02-05 16:51:57 -05:00
README.md
sysinfo.go Fix denial of service with large numbers in cpuset-cpus and cpuset-mems 2018-10-05 15:09:02 +02:00
sysinfo_linux.go Add canonical import comment 2018-02-05 16:51:57 -05:00
sysinfo_linux_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00
sysinfo_test.go Add canonical import comment 2018-02-05 16:51:57 -05:00
sysinfo_unix.go Add canonical import comment 2018-02-05 16:51:57 -05:00
sysinfo_windows.go Add canonical import comment 2018-02-05 16:51:57 -05:00

SysInfo stores information about which features a kernel supports.