Skip to content

deps: update to libpathrs v0.2.6 - #5448

Open
cyphar wants to merge 1 commit into
opencontainers:mainfrom
cyphar:libpathrs-0.2.6
Open

deps: update to libpathrs v0.2.6#5448
cyphar wants to merge 1 commit into
opencontainers:mainfrom
cyphar:libpathrs-0.2.6

Conversation

@cyphar

@cyphar cyphar commented Sep 7, 2026

Copy link
Copy Markdown
Member

The primary change in this release for runc is that libpathrs's
behaviour when the cached ProcfsHandle fd is closed from underneath it
is now more graceful (previously this would cause panics on the error
path). This is a bit of an unusual program state, but it is something we
do in runc before we exec the user binary. Commit 1056e68 ("libct:
don't reset selinux labels on init error path") eliminated one cause of
such panics, but this should completely resolve the issue.

It also includes some key fixes when building with Clang or when
distributions re-generate the libpathrs <pathrs.h> header as part of
their build process which go-pathrs then consumes.

This independently fixes #5438.

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

@cyphar cyphar added this to the 1.5.2 milestone Sep 7, 2026
@cyphar cyphar added the backport/1.5-done A PR in main branch which has been backported to release-1.5 label Sep 7, 2026
The primary change in this release for runc is that libpathrs's
behaviour when the cached ProcfsHandle fd is closed from underneath it
is now more graceful (previously this would cause panics on the error
path). This is a bit of an unusual program state, but it is something we
do in runc before we exec the user binary. Commit 1056e68 ("libct:
don't reset selinux labels on init error path") eliminated one cause of
such panics, but this should completely resolve the issue.

It also includes some key fixes when building with Clang or when
distributions re-generate the libpathrs <pathrs.h> header as part of
their build process which go-pathrs then consumes.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/1.5-done A PR in main branch which has been backported to release-1.5

Projects

None yet

Development

Successfully merging this pull request may close these issues.

runc init panics with SIGABRT (pathrs procfs handle invalid after fork) in docker/moby's TestNoNewPrivileges

2 participants