9037069da8
- https://github.com/golang/go/issues?q=milestone%3AGo1.23.1+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.23.0...go1.23.1 These minor releases include 3 security fixes following the security policy: - go/parser: stack exhaustion in all Parse* functions Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. This is CVE-2024-34155 and Go issue https://go.dev/issue/69138. - encoding/gob: stack exhaustion in Decoder.Decode Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. Thanks to Md Sakib Anwar of The Ohio State University for reporting this issue. This is CVE-2024-34156 and Go issue https://go.dev/issue/69139. - go/build/constraint: stack exhaustion in Parse Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. This is CVE-2024-34158 and Go issue https://go.dev/issue/69141. View the release notes for more information: https://go.dev/doc/devel/release#go1.23.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
33 lines
983 B
JSON
33 lines
983 B
JSON
// For format details, see https://aka.ms/devcontainer.json.
|
|
{
|
|
"name": "containerd",
|
|
"build": {
|
|
"context": "..",
|
|
"dockerfile": "Dockerfile"
|
|
},
|
|
"workspaceFolder": "/go/src/github.com/containerd/containerd",
|
|
"workspaceMount": "source=${localWorkspaceFolder},target=/go/src/github.com/containerd/containerd,type=bind,consistency=cached",
|
|
|
|
// Features to add to the dev container. More info: https://containers.dev/features.
|
|
"features": {
|
|
"ghcr.io/devcontainers/features/docker-in-docker:2": {},
|
|
"ghcr.io/devcontainers/features/go:1": {
|
|
"version": "1.23.1"
|
|
}
|
|
},
|
|
|
|
"onCreateCommand": "sudo PATH=$PATH bash .devcontainer/setup.sh",
|
|
"postAttachCommand": {
|
|
"Runs all non-integration tests that do not require `root` privileges": "make test",
|
|
"Runs non-integration tests which require `root`": "sudo PATH=$PATH make root-test"
|
|
},
|
|
|
|
"remoteUser": "root",
|
|
"runArgs": [
|
|
"--ipc=host",
|
|
"--volume=/dev:/dev",
|
|
"--volume=/run/udev:/run/udev",
|
|
"--privileged"
|
|
]
|
|
}
|