Skip to content

security: sanitize driver log fields - #3

Merged
chen21019 merged 1 commit into
mainfrom
security/driver-log-injection-20260826
Aug 26, 2026
Merged

security: sanitize driver log fields#3
chen21019 merged 1 commit into
mainfrom
security/driver-log-injection-20260826

Conversation

@chen21019

Copy link
Copy Markdown

Result

  • normalize driver, schema, machine, path, and error values before operational logging
  • stop logging raw jail command output; retain its bounded byte count
  • check schema creation errors before dereferencing the returned schema

Verification

  • go test ./internal/logsafe
  • Linux amd64 test binaries cross-compiled for ./dynamic, ./handlers, and root
  • Windows cannot execute the existing Linux chroot/credential code or Linux path assumptions; PR CI runs them on Linux
  • git diff --check

@chen21019
chen21019 requested a review from a team as a code owner August 26, 2026 06:59
@chen21019
chen21019 merged commit c76c31d into main Aug 26, 2026
6 checks passed
@chen21019
chen21019 deleted the security/driver-log-injection-20260826 branch August 26, 2026 07:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant