From 3f9494f1d64c9ffe04c17ec976f5a2620c4e6ba9 Mon Sep 17 00:00:00 2001
From: Evan Hazlett <ejhazlett@gmail.com>
Date: Wed, 26 Oct 2016 13:30:53 -0700
Subject: [PATCH] review changes

- fix lint issues
- use errors pkg for wrapping errors
- cleanup on error when setting up secrets mount
- fix erroneous import
- remove unneeded switch for secret reference mode
- return single mount for secrets instead of slice

Signed-off-by: Evan Hazlett <ejhazlett@gmail.com>
---
 command/service/parse.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/command/service/parse.go b/command/service/parse.go
index 41883fb445..596d8e50d8 100644
--- a/command/service/parse.go
+++ b/command/service/parse.go
@@ -3,6 +3,7 @@ package service
 import (
 	"context"
 	"fmt"
+	"path/filepath"
 	"strings"
 
 	"github.com/docker/docker/api/types"
@@ -31,6 +32,13 @@ func parseSecretString(secretString string) (string, string, error) {
 	} else {
 		targetName = secretName
 	}
+
+	// ensure target is a filename only; no paths allowed
+	tDir, _ := filepath.Split(targetName)
+	if tDir != "" {
+		return "", "", fmt.Errorf("target must not have a path")
+	}
+
 	return secretName, targetName, nil
 }