Merge pull request from GHSA-5g49-rx9x-qfc6

[1.1] libct/cgroups.OpenFile: clean "file" argument
opencontainers · Oct 30, 2023 · 7b469c9 · 7b469c9
2 parents e1adc7f + b426e9b
commit 7b469c9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/libcontainer/cgroups/file.go b/libcontainer/cgroups/file.go
@@ -10,6 +10,7 @@ import (
 	"strings"
 	"sync"
 
+	"github.com/opencontainers/runc/libcontainer/utils"
 	"github.com/sirupsen/logrus"
 	"golang.org/x/sys/unix"
 )
@@ -122,7 +123,7 @@ func openFile(dir, file string, flags int) (*os.File, error) {
 		flags |= os.O_TRUNC | os.O_CREATE
 		mode = 0o600
 	}
-	path := path.Join(dir, file)
+	path := path.Join(dir, utils.CleanPath(file))
 	if prepareOpenat2() != nil {
 		return openFallback(path, flags, mode)
 	}