| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
ozonec: fix the issue that the recevier timeouts when system resources are tight Using timeout periods to control inter process communication is an unreasonable behavior. In situations where system resources are scarce, it is easy to trigger timeouts. Remove this unreasonable behavior and properly close the inter process communication channel by controlling the sender/receiver shutdown timing of the socketpair. Signed-off-by: huzihao huzihao5@huawei.com Signed-off-by: liuxiangdong <liuxiangdong5@huawei.com> | 4 个月前 | |
clippy check fix Fix all kinds lint warnings given by rust compiler to make the code more readable without changing the function or logic. Signed-off-by: Fan Xuan Zhe <fanxuanzhe@huawei.com> Signed-off-by: Tao Chen <boby.chen@huawei.com> | 7 个月前 | |
ozonec/mount: Introduce openat2() to validate mount target A mount target path could be specified containing symlinks that would allow processes in the container to escape to the host filesystem. Nowadays Linux kernel provides the syscall openat2() which can effectively block symlink attacks. However, mount syscall only operates on paths, so we can get a file descriptor by openat2() and build the proc path "/proc/self/fd/xx" to do mounting. Fixes: CVE-2021-30465,CVE-2024-21626 | 1 年前 | |
clippy check fix Fix all kinds lint warnings given by rust compiler to make the code more readable without changing the function or logic. Signed-off-by: Fan Xuan Zhe <fanxuanzhe@huawei.com> Signed-off-by: Tao Chen <boby.chen@huawei.com> | 7 个月前 | |
safety: modify some unsafe Safety notes Modify some unsafe Safety notes in Ozonec/Pflash/Block_backend mod. Signed-off-by: Fei Xu <xufei30@huawei.com> | 8 个月前 | |
ozonec: Fix compile issues with rustc 1.64 | 1 年前 |