GO-2026-4390: Beam Exposes sensitive information via joinCleanPath function in github.com/beam-cloud/beta9

volume

package

v0.0.0-...-c1cd75e Latest Latest Go to latest Published: Jan 16, 2026 License: AGPL-3.0 Imports: 29 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/beam-cloud/beta9

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func CalculateDirSize(path string) (uint64, error)
func GetVolumePaths(workspaceName string, volumeExternalId string, volumePath string) (string, string, error)
func JoinVolumePath(workspaceName, volumeExternalId string, subPaths ...string) string
type CopyPathContent
type FileInfo
type GlobalVolumeService
type VolumePathTokenData
type VolumeService
- func NewGlobalVolumeService(config types.FileServiceConfig, backendRepo repository.BackendRepository, ...) (VolumeService, error)

Constants ¶

View Source

const PresignedGetURLExpiration = 3600 // 1 hour

Variables ¶

This section is empty.

Functions ¶

func CalculateDirSize ¶

func CalculateDirSize(path string) (uint64, error)

func GetVolumePaths ¶

func GetVolumePaths(workspaceName string, volumeExternalId string, volumePath string) (string, string, error)

GetVolumePaths returns the absolute parent directory and absolute volumePath. Because volumePath can contain 1 or more of "..", we will return an error if volumePath tries to go above the rootVolumePath. The error should be used to indicate someone accessing a directory above a Volume's directory, which may be a security issue depending on the context.

func JoinVolumePath ¶

func JoinVolumePath(workspaceName, volumeExternalId string, subPaths ...string) string

Types ¶

type CopyPathContent ¶

type CopyPathContent struct {
	Path    string
	Content []byte
}

type FileInfo ¶

type FileInfo struct {
	Path    string `json:"path"`
	Size    uint64 `json:"size"`
	ModTime int64  `json:"mod_time"`
	IsDir   bool   `json:"is_dir"`
}

type GlobalVolumeService ¶

type GlobalVolumeService struct {
	pb.UnimplementedVolumeServiceServer
	// contains filtered or unexported fields
}

func (*GlobalVolumeService) AbortMultipartUpload ¶

func (s *GlobalVolumeService) AbortMultipartUpload(ctx context.Context, in *pb.AbortMultipartUploadRequest) (*pb.AbortMultipartUploadResponse, error)

func (*GlobalVolumeService) CompleteMultipartUpload ¶

func (s *GlobalVolumeService) CompleteMultipartUpload(ctx context.Context, in *pb.CompleteMultipartUploadRequest) (*pb.CompleteMultipartUploadResponse, error)

func (*GlobalVolumeService) CopyPathStream ¶

func (vs *GlobalVolumeService) CopyPathStream(stream pb.VolumeService_CopyPathStreamServer) error

func (*GlobalVolumeService) CreateMultipartUpload ¶

func (s *GlobalVolumeService) CreateMultipartUpload(ctx context.Context, in *pb.CreateMultipartUploadRequest) (*pb.CreateMultipartUploadResponse, error)

func (*GlobalVolumeService) CreatePresignedURL ¶

func (s *GlobalVolumeService) CreatePresignedURL(ctx context.Context, in *pb.CreatePresignedURLRequest) (*pb.CreatePresignedURLResponse, error)

func (*GlobalVolumeService) DeletePath ¶

func (vs *GlobalVolumeService) DeletePath(ctx context.Context, in *pb.DeletePathRequest) (*pb.DeletePathResponse, error)

func (*GlobalVolumeService) DeleteVolume ¶

func (vs *GlobalVolumeService) DeleteVolume(ctx context.Context, in *pb.DeleteVolumeRequest) (*pb.DeleteVolumeResponse, error)

func (*GlobalVolumeService) GenerateWorkspaceVolumePathDownloadToken ¶

func (gvs *GlobalVolumeService) GenerateWorkspaceVolumePathDownloadToken(workspaceId string, volumePath string) (string, error)

func (*GlobalVolumeService) GetFileServiceInfo ¶

func (s *GlobalVolumeService) GetFileServiceInfo(ctx context.Context, in *pb.GetFileServiceInfoRequest) (*pb.GetFileServiceInfoResponse, error)

func (*GlobalVolumeService) GetOrCreateVolume ¶

func (vs *GlobalVolumeService) GetOrCreateVolume(ctx context.Context, in *pb.GetOrCreateVolumeRequest) (*pb.GetOrCreateVolumeResponse, error)

func (*GlobalVolumeService) ListPath ¶

func (vs *GlobalVolumeService) ListPath(ctx context.Context, in *pb.ListPathRequest) (*pb.ListPathResponse, error)

func (*GlobalVolumeService) ListVolumes ¶

func (vs *GlobalVolumeService) ListVolumes(ctx context.Context, in *pb.ListVolumesRequest) (*pb.ListVolumesResponse, error)

func (*GlobalVolumeService) MovePath ¶

func (vs *GlobalVolumeService) MovePath(ctx context.Context, in *pb.MovePathRequest) (*pb.MovePathResponse, error)

func (*GlobalVolumeService) StatPath ¶

func (vs *GlobalVolumeService) StatPath(ctx context.Context, in *pb.StatPathRequest) (*pb.StatPathResponse, error)

func (*GlobalVolumeService) ValidateWorkspaceVolumePathDownloadToken ¶

func (gvs *GlobalVolumeService) ValidateWorkspaceVolumePathDownloadToken(workspaceId string, volumePath string, token string) error

type VolumePathTokenData ¶

type VolumePathTokenData struct {
	WorkspaceId string `redis:"workspace_id"`
	VolumePath  string `redis:"volume_path"`
}

type VolumeService ¶

type VolumeService interface {
	pb.VolumeServiceServer
	GetOrCreateVolume(ctx context.Context, in *pb.GetOrCreateVolumeRequest) (*pb.GetOrCreateVolumeResponse, error)
	DeleteVolume(ctx context.Context, in *pb.DeleteVolumeRequest) (*pb.DeleteVolumeResponse, error)
	ListPath(ctx context.Context, in *pb.ListPathRequest) (*pb.ListPathResponse, error)
	DeletePath(ctx context.Context, in *pb.DeletePathRequest) (*pb.DeletePathResponse, error)
	MovePath(ctx context.Context, in *pb.MovePathRequest) (*pb.MovePathResponse, error)
	CopyPathStream(stream pb.VolumeService_CopyPathStreamServer) error
}

func NewGlobalVolumeService ¶

func NewGlobalVolumeService(config types.FileServiceConfig, backendRepo repository.BackendRepository, workspaceRepo repository.WorkspaceRepository, rdb *common.RedisClient, routeGroup *echo.Group) (VolumeService, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL