docker-cli

Files

Justin Cormack 00c518411b Fix denial of service with large numbers in cpuset-cpus and cpuset-mems

Using a value such as `--cpuset-mems=1-9223372036854775807` would cause
`dockerd` to run out of memory allocating a map of the values in the
validation code. Set limits to the normal limit of the number of CPUs,
and improve the error handling.

Reported by Huawei PSIRT.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit f8e876d7616469d07b8b049ecb48967eeb8fa7a5)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 0922d32bce74657266aff213f83dfa638e8077f4
Component: engine

2018-10-05 15:13:43 +02:00

numcpu_linux.go

Add canonical import comment

2018-02-05 16:51:57 -05:00

numcpu_windows.go

Add canonical import comment

2018-02-05 16:51:57 -05:00

numcpu.go

Add canonical import comment

2018-02-05 16:51:57 -05:00

README.md

Add some basic doc for SysInfo