Wedson Almeida Filho cde438ceb7 image_rpc: always call verify_cid after determining the cid ...

Prior to this patch, we were missing a call to `verify_cid` when the cid
was derived from the image path, which meant that the host could specify
something like "prefix/..", and we would use ".." as the cid. Paths
derived from this (e.g., `bundle_path`) would not be at the intended
tree.

This patch factors the code out of `pull_image` so that it can be more
easily tested. Tests are added for a number of cases.

Fixes #5421

Signed-off-by: Wedson Almeida Filho <walmeida@microsoft.com>

2022-10-13 03:59:18 +01:00

..

agent

image_rpc: always call verify_cid after determining the cid

2022-10-13 03:59:18 +01:00

dragonball

Merge pull request #5278 from openanolis/chao/update_linux_loader_ut

2022-09-30 11:12:29 +08:00

libs

Merge pull request #5328 from GeorginaKin/CCv0

2022-10-10 22:11:59 +02:00

runtime

runtime: Merge fixes

2022-10-10 18:49:30 +01:00

runtime-rs

runtime-rs: delete duplicated PASSTHROUGH_FS_DIR const

2022-09-30 15:53:08 +08:00

tools

CCv0: Merge main into CCv0 branch

2022-10-05 16:34:02 +01:00