tensorchord / envd / 36319503134

42%

main: 42%

Build Type

Pull #2112

github

Committed by kemingy

Commit Message

fix: restrict install.python_packages paths to the build context

The requirements file and local wheels accepted arbitrary paths. The
requirements file was read on the host without any containment check,
so a path like ../../etc/passwd escaped the build context and its
content leaked into build logs and image metadata.

- frontend: resolve paths against the build context (thread-local),
  reject paths escaping it (absolute, .., symlinks), and normalize to
  a context-relative path for reuse inside the container
- compile: verify the symlink-resolved requirements file stays inside
  the build context before reading it on the host, which also covers
  graphs reloaded from image labels

Pull Request Pull Request #2112: fix: restrict install.python_packages paths to the build context

Coverage Stats

49 of 66 new or added lines in 4 files covered. (74.24%)

27 existing lines in 16 files now uncovered.

4816 of 11432 relevant lines covered (42.13%)

132.75 hits per line