f3cdfc488e
runc rc95 contains a fix for CVE-2021-30465. runc rc94 provides fixes and improvements. One notable change is cgroup manager's Set now accept Resources rather than Cgroup (see https://github.com/opencontainers/runc/pull/2906). Modify the code accordingly. Also update runc dependencies (as hinted by hack/lint-depdendencies.sh): github.com/cilium/ebpf v0.5.0 github.com/containerd/console v1.0.2 github.com/coreos/go-systemd/v22 v22.3.1 github.com/godbus/dbus/v5 v5.0.4 github.com/moby/sys/mountinfo v0.4.1 golang.org/x/sys v0.0.0-20210426230700-d19ff857e887 github.com/google/go-cmp v0.5.4 github.com/kr/pretty v0.2.1 github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
43 lines
763 B
Go
43 lines
763 B
Go
// +build gofuzz
|
|
|
|
package user
|
|
|
|
import (
|
|
"io"
|
|
"strings"
|
|
)
|
|
|
|
func IsDivisbleBy(n int, divisibleby int) bool {
|
|
return (n % divisibleby) == 0
|
|
}
|
|
|
|
func FuzzUser(data []byte) int {
|
|
if len(data) == 0 {
|
|
return -1
|
|
}
|
|
if !IsDivisbleBy(len(data), 5) {
|
|
return -1
|
|
}
|
|
|
|
var divided [][]byte
|
|
|
|
chunkSize := len(data) / 5
|
|
|
|
for i := 0; i < len(data); i += chunkSize {
|
|
end := i + chunkSize
|
|
|
|
divided = append(divided, data[i:end])
|
|
}
|
|
|
|
_, _ = ParsePasswdFilter(strings.NewReader(string(divided[0])), nil)
|
|
|
|
var passwd, group io.Reader
|
|
|
|
group = strings.NewReader(string(divided[1]))
|
|
_, _ = GetAdditionalGroups([]string{string(divided[2])}, group)
|
|
|
|
passwd = strings.NewReader(string(divided[3]))
|
|
_, _ = GetExecUser(string(divided[4]), nil, passwd, group)
|
|
return 1
|
|
}
|