Zach KoopmansandgVisor bot 230c28bb8d Fix use-after-free in socket pluginStackRW single-block CGO calls ...

When calling cgo.Read, cgo.Write, and cgo.Sendto with a single-block BlockSeq,
the backing slice address was converted to uintptr via Addr(). Because Go's
garbage collector does not recognize uintptr as a live pointer reference, the
underlying backing array could be collected or reused during the CGO call.
This adds runtime.KeepAlive on the BlockSeq arguments after each single-block
CGO call in ReadToBlocks and WriteFromBlocks.

PiperOrigin-RevId: 968029244

2026-08-20 13:45:38 -07:00

..

BUILD

socket(): Check for CAP_NET_RAW in the netns-owning userns

2025-12-12 20:09:51 -08:00

notifier.go

Fix a few typos

2025-01-29 21:16:51 -08:00

provider.go

Cleanup creds-related funcs and change CapError behavior

2026-01-08 17:23:58 -08:00

readwriter.go

Fix use-after-free in socket pluginStackRW single-block CGO calls

2026-08-20 13:45:38 -07:00

socket.go

vfs: skip write tracking for special files on open

2026-07-28 06:47:46 -04:00

stack.go

net: Ensure deterministic interface enumeration order

2026-04-23 10:16:47 +08:00

util.go

…