From 1d143562d2d491d054e28815565fe371c461b8a6 Mon Sep 17 00:00:00 2001 From: Kir Kolyshkin Date: Thu, 7 May 2020 18:30:01 -0700 Subject: [PATCH] libct/cgroups/fs: access m.paths under lock 1. Prevent theoretical "concurrent map access" error to m.paths. 2. There is no need to call m.Paths -- we can access m.paths directly. Signed-off-by: Kir Kolyshkin --- libcontainer/cgroups/fs/apply_raw.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/libcontainer/cgroups/fs/apply_raw.go b/libcontainer/cgroups/fs/apply_raw.go index e4cbaedec..760d4e6eb 100644 --- a/libcontainer/cgroups/fs/apply_raw.go +++ b/libcontainer/cgroups/fs/apply_raw.go @@ -247,9 +247,10 @@ func (m *manager) Set(container *configs.Config) error { return nil } - paths := m.GetPaths() + m.mu.Lock() + defer m.mu.Unlock() for _, sys := range m.getSubsystems() { - path := paths[sys.Name()] + path := m.paths[sys.Name()] if err := sys.Set(path, container.Cgroups); err != nil { if m.rootless && sys.Name() == "devices" { continue