diff options
| author | Kevin Krakauer <krakauer@google.com> | 2019-11-14 15:55:07 -0800 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2019-11-14 16:08:34 -0800 |
| commit | 339536de5eefe782813aabae4aeeb312b3c4dde7 (patch) | |
| tree | 65a862e9b16cc15d7edd249444c2c355a2bb16db /pkg/sentry/fs/inode.go | |
| parent | 1e1f5ce08210af6211bcb1c8da293a63a79165fe (diff) | |
Check that a file is a regular file with open(O_TRUNC).
It was possible to panic the sentry by opening a cache revalidating folder with
O_TRUNC|O_CREAT.
Avoids breaking php tests.
PiperOrigin-RevId: 280533213
Diffstat (limited to 'pkg/sentry/fs/inode.go')
| -rw-r--r-- | pkg/sentry/fs/inode.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/pkg/sentry/fs/inode.go b/pkg/sentry/fs/inode.go index f4ddfa406..2d43dff1d 100644 --- a/pkg/sentry/fs/inode.go +++ b/pkg/sentry/fs/inode.go @@ -344,6 +344,10 @@ func (i *Inode) SetTimestamps(ctx context.Context, d *Dirent, ts TimeSpec) error // Truncate calls i.InodeOperations.Truncate with i as the Inode. func (i *Inode) Truncate(ctx context.Context, d *Dirent, size int64) error { + if IsDir(i.StableAttr) { + return syserror.EISDIR + } + if i.overlay != nil { return overlayTruncate(ctx, i.overlay, d, size) } |