moby--moby

History

Justin Cormack f8e876d761 Fix denial of service with large numbers in cpuset-cpus and cpuset-mems Using a value such as `--cpuset-mems=1-9223372036854775807` would cause `dockerd` to run out of memory allocating a map of the values in the validation code. Set limits to the normal limit of the number of CPUs, and improve the error handling. Reported by Huawei PSIRT. Signed-off-by: Justin Cormack <justin.cormack@docker.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>		2018-10-05 15:09:02 +02:00
..
README.md	Add some basic doc for SysInfo	2015-03-26 23:05:07 -04:00
numcpu.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
numcpu_linux.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
numcpu_windows.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
sysinfo.go	Fix denial of service with large numbers in cpuset-cpus and cpuset-mems	2018-10-05 15:09:02 +02:00
sysinfo_linux.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
sysinfo_linux_test.go	Update tests to use gotest.tools 👼	2018-06-13 09:04:30 +02:00
sysinfo_test.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
sysinfo_unix.go	Add canonical import comment	2018-02-05 16:51:57 -05:00
sysinfo_windows.go	Add canonical import comment	2018-02-05 16:51:57 -05:00

SysInfo stores information about which features a kernel supports.