From 84548b78935a8ad39e76a219d8be0fd552770180 Mon Sep 17 00:00:00 2001 From: Shambhavi Srivastava Date: Wed, 16 Nov 2022 16:47:26 -0800 Subject: [PATCH] Adding check to ensure containerIDs are unique in multi-container mode. PiperOrigin-RevId: 489073573 --- pkg/sentry/control/lifecycle.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkg/sentry/control/lifecycle.go b/pkg/sentry/control/lifecycle.go index 0d26100b7..8fc832eec 100644 --- a/pkg/sentry/control/lifecycle.go +++ b/pkg/sentry/control/lifecycle.go @@ -303,6 +303,11 @@ func (l *Lifecycle) StartContainer(args *StartContainerArgs, _ *uint32) error { if l.containerMap == nil { l.containerMap = make(map[string]*Container) } + + if _, ok := l.containerMap[initArgs.ContainerID]; ok { + return fmt.Errorf("container id: %v already exists", initArgs.ContainerID) + } + l.containerMap[initArgs.ContainerID] = c l.mu.Unlock()