Affected by GO-2026-4858 and 2 other vulnerabilities

GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit

GO-2026-6255: BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

file

package

v0.6.3 Latest Latest Go to latest Published: Nov 13, 2019 License: Apache-2.0 Imports: 19 Imported by: 1

Details

Rendered for

This section is empty.

This section is empty.

This section is empty.

type Backend struct {
}

func (fb *Backend) Copy(ctx context.Context, m1, m2, user, group fileoptypes.Mount, action pb.FileActionCopy) error

func (fb *Backend) Mkdir(ctx context.Context, m, user, group fileoptypes.Mount, action pb.FileActionMkDir) error

func (fb *Backend) Mkfile(ctx context.Context, m, user, group fileoptypes.Mount, action pb.FileActionMkFile) error

func (fb *Backend) Rm(ctx context.Context, m fileoptypes.Mount, action pb.FileActionRm) error

type Mount struct {
	// contains filtered or unexported fields
}

func (m *Mount) IsFileOpMount()

func (m *Mount) Release(ctx context.Context) error

type RefManager struct {
	// contains filtered or unexported fields
}

func NewRefManager(cm cache.Manager) *RefManager

func (rm *RefManager) Commit(ctx context.Context, mount fileoptypes.Mount) (fileoptypes.Ref, error)

func (rm *RefManager) Prepare(ctx context.Context, ref fileoptypes.Ref, readonly bool) (fileoptypes.Mount, error)