Yong Tang 86ae5d2895 Restrict checkpoint name to prevent directory traversal ... This fix tries to address the issue raised in 28769 where checkpoint name was not checked before passing to containerd. As a result, it was possible to use a special checkpoint name to get outside of the container's directory. This fix add restriction `[a-zA-Z0-9][a-zA-Z0-9_.-]+` (`RestrictedNamePattern`). This is the same as container name restriction. This fix fixes 28769. Signed-off-by: Yong Tang <yong.tang.github@outlook.com> (cherry picked from commit c90ec05175) Signed-off-by: Victor Vieux <victorvieux@gmail.com>		2016-11-28 11:17:55 -08:00
..
caps
cluster	Do not display the digest or size of swarm secrets	2016-11-22 16:54:50 -08:00
events	Merge pull request #25800 from vdemeester/25798-fix-event-actions	2016-10-28 05:20:49 +02:00
exec	Move StreamConfig out of runconfig	2016-11-14 14:03:05 -08:00
graphdriver	Swap usage of LazyDLL and LoadDLL to LazySystemDLL.	2016-11-22 18:40:35 -08:00
links
logger	Swap usage of LazyDLL and LoadDLL to LazySystemDLL.	2016-11-22 18:40:35 -08:00
network	Fix autostart for swarm scope connected containers	2016-09-13 14:21:58 -07:00
apparmor_default.go
apparmor_default_unsupported.go
archive.go	Fix uneccessary calls to volume.Unmount()	2016-11-10 14:04:08 -05:00
archive_unix.go
archive_windows.go
attach.go	Move errors/ to api/errors	2016-09-16 12:27:13 -04:00
auth.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
bindmount_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
bindmount_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
cache.go	Implement build cache based on history array	2016-09-23 11:30:06 -07:00
changes.go	Windows: support docker diff	2016-10-28 11:06:54 -07:00
checkpoint.go	Restrict checkpoint name to prevent directory traversal	2016-11-28 11:17:55 -08:00
cluster.go	add docker network prune	2016-10-25 06:43:54 +00:00
commit.go	Fix several issues with go vet and go fmt	2016-11-18 15:14:49 -08:00
config.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
config_common_unix.go	Add expected 3rd party binaries commit ids to info	2016-11-09 07:42:44 -08:00
config_experimental.go	Make experimental a runtime flag	2016-10-24 15:20:01 -07:00
config_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
config_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
config_unix.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
config_unix_test.go	fix config load error with ulimits	2016-10-17 18:48:40 +08:00
config_windows.go	Add expected 3rd party binaries commit ids to info	2016-11-09 07:42:44 -08:00
config_windows_test.go	fix config load error with ulimits	2016-10-17 18:48:40 +08:00
container.go	Move StreamConfig out of runconfig	2016-11-14 14:03:05 -08:00
container_operations.go	Merge pull request #27466 from mrjana/net	2016-11-08 18:25:45 +01:00
container_operations_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
container_operations_unix.go	plugins: support for devices	2016-11-22 16:16:33 -08:00
container_operations_windows.go	Windows: Factor out unused fields in container	2016-10-13 14:51:10 -07:00
create.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
create_unix.go	Add new HostConfig field, Mounts.	2016-09-13 09:55:35 -04:00
create_windows.go	Windows: Revert 27884	2016-11-18 13:36:37 -08:00
daemon.go	Allow graphdriver plugins to use v2	2016-11-19 23:49:03 -08:00
daemon_experimental.go	move plugins out of experimental	2016-11-10 15:51:32 -08:00
daemon_linux.go
daemon_linux_test.go
daemon_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_unix.go	daemon: remove not needed unmarshal	2016-11-23 12:27:11 -08:00
daemon_unix_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_unsupported.go
daemon_windows.go	Ensure vmcompute.dll exists during daemon start	2016-11-22 16:15:19 -08:00
debugtrap.go	Reduce spew data dumped	2016-11-18 13:32:26 -08:00
debugtrap_unix.go	Spew debugging	2016-11-03 10:05:11 -07:00
debugtrap_unsupported.go	Spew debugging	2016-11-03 10:05:11 -07:00
debugtrap_windows.go	Spew debugging	2016-11-03 10:05:11 -07:00
delete.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
delete_test.go	make client side know container removal in progress	2016-09-27 18:06:54 +08:00
discovery.go	validate heartbeat in discovery cluster opts	2016-09-01 01:07:05 +08:00
discovery_test.go	validate heartbeat in discovery cluster opts	2016-09-01 01:07:05 +08:00
disk_usage.go	Add reference filter and deprecated filter param…	2016-11-11 15:34:01 +01:00
errors.go	Move errors/ to api/errors	2016-09-16 12:27:13 -04:00
events.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
events_test.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
exec.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
exec_linux.go	Remove hacked Windows OCI spec, compile fixups	2016-09-27 12:07:35 -07:00
exec_solaris.go
exec_windows.go	Windows: Plumb through user	2016-11-08 17:41:56 -08:00
export.go	pkg/archive: remove unnecessary Archive and Reader type	2016-10-20 19:31:24 -07:00
getsize_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
health.go	Use Container.Config.Shell instead of hardcoded…	2016-11-19 23:45:58 -08:00
health_test.go	Fix deadlock on cancelling healthcheck	2016-11-18 13:37:44 -08:00
image.go	Deprecate repo:shortid syntax	2016-10-06 17:12:17 -07:00
image_delete.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
image_exporter.go
image_history.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
image_inspect.go	Inspect populate image OSVersion	2016-10-06 11:46:24 -07:00
image_pull.go	fix a few golint errors	2016-11-19 23:50:06 -08:00
image_push.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
image_tag.go	Generalize content addressable and reference storage	2016-09-15 18:08:19 -07:00
images.go	Add reference filter and deprecated filter param…	2016-11-11 15:34:01 +01:00
import.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
info.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
info_unix.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
info_windows.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
inspect.go	record pid of exec'd process	2016-10-20 17:06:11 +02:00
inspect_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
inspect_unix.go	Add new HostConfig field, Mounts.	2016-09-13 09:55:35 -04:00
inspect_windows.go	Add new HostConfig field, Mounts.	2016-09-13 09:55:35 -04:00
keys.go	Change root_maxkeys	2016-06-27 10:23:37 -07:00
keys_unsupported.go	Change root_maxkeys	2016-06-27 10:23:37 -07:00
kill.go	Taking stop-signal into account when docker kill	2016-10-24 11:10:14 -07:00
links.go
links_test.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
list.go	Replace all "Filter" field with "Filters" for consistency	2016-11-01 23:09:30 +08:00
list_unix.go
list_windows.go
logdrivers_linux.go	added logentries driver	2016-10-06 22:48:53 -03:00
logdrivers_windows.go	Windows: Enable fluentd logdriver	2016-11-08 19:54:57 -08:00
logs.go	Move stdio attach from libcontainerd backend to callback	2016-10-24 00:20:36 -07:00
logs_test.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
metrics.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
monitor.go	Move StreamConfig out of runconfig	2016-11-14 14:03:05 -08:00
monitor_linux.go
monitor_solaris.go
monitor_windows.go	Move stdio attach from libcontainerd backend to callback	2016-10-24 00:20:36 -07:00
mounts.go	Add new HostConfig field, Mounts.	2016-09-13 09:55:35 -04:00
names.go	Restrict checkpoint name to prevent directory traversal	2016-11-28 11:17:55 -08:00
network.go	Merge pull request #28056 from LK4D4/solaris_me	2016-11-07 16:46:18 -08:00
oci_linux.go	plugins: misc fixes	2016-11-22 16:16:39 -08:00
oci_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
oci_windows.go	Windows: Add cpu count option	2016-11-04 13:38:50 -07:00
pause.go
prune.go	add docker network prune	2016-10-25 06:43:54 +00:00
rename.go	Fix docker rename with linked containers	2016-06-27 19:58:05 -07:00
resize.go
restart.go	Allow providing a custom storage directory for docker checkpoints	2016-10-28 07:56:05 -04:00
search.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
search_test.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
seccomp_disabled.go	Replace old oci specs import with runtime-specs	2016-08-17 09:38:34 -07:00
seccomp_linux.go	daemon: add a flag to override the default seccomp profile	2016-11-02 21:41:29 +01:00
seccomp_unsupported.go	Fix seccomp output in docker info	2016-07-08 17:26:42 -07:00
secrets.go	do not force target type for secret references	2016-11-21 14:45:39 -08:00
secrets_linux.go	secrets: secret management for swarm	2016-11-09 14:27:43 -05:00
secrets_unsupported.go	secrets: secret management for swarm	2016-11-09 14:27:43 -05:00
selinux_linux.go
selinux_unsupported.go
start.go	Fix uneccessary calls to volume.Unmount()	2016-11-10 14:04:08 -05:00
start_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
start_windows.go	Swarm-mode overlay networking support for windows	2016-11-10 09:54:40 -08:00
stats.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
stats_collector.go	Windows: stats support	2016-09-16 11:56:15 -07:00
stats_collector_solaris.go
stats_collector_unix.go	Windows: stats support	2016-09-16 11:56:15 -07:00
stats_collector_windows.go	Windows: stats support	2016-09-16 11:56:15 -07:00
stats_unix.go	Removed engine-api leftovers	2016-09-21 12:36:52 +02:00
stats_windows.go	Windows: stats support	2016-09-16 11:56:15 -07:00
stop.go	Update docker stop and docker restart to allow not specifying timeout and use the one specified at container creation time.	2016-10-17 12:53:35 -07:00
top_unix.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
top_unix_test.go	Validate arguments for ps in docker top	2016-07-08 05:58:11 +00:00
top_windows.go	Windows: docker top implementation	2016-09-07 16:29:02 -07:00
unpause.go	remove running judgement when unpause container	2016-08-29 10:16:18 +08:00
update.go	Generate container update response from swagger spec.	2016-10-31 11:16:02 -04:00
update_linux.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
update_solaris.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
update_windows.go	Add engine-api types to docker	2016-09-07 11:05:58 -07:00
volumes.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
volumes_unit_test.go
volumes_unix.go	close the file	2016-11-21 13:23:23 -08:00
volumes_windows.go	Remove hacked Windows OCI spec, compile fixups	2016-09-27 12:07:35 -07:00
wait.go	Fix race on force deleting container created by task	2016-06-14 16:49:04 -07:00
workdir.go	COPY file . after WORKDIR (now always created)	2016-11-28 11:12:45 -08:00