Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Undefined
Fix Version/s: None
Affects Version/s: 4.18.z
Component/s: Image Registry
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
None
Regression:
None

Target Backport Versions:
None
Target Version:
None
Release Blocker:
None
Sprint:
None

RH Private Keywords:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

(Please reassign to the correct component if I got it wrong)

Description of problem:

https://github.com/openshift/cluster-image-registry-operator/blob/2212ae9c5d1b1dfeaf2036677428968a031335f5/bindata/nodecadaemon.yaml#L54 is not atomic: looking at strace, it uses openat(AT_FDCWD, "a", O_WRONLY|O_TRUNC) in -place, so concurrent readers of the certificate can see an empty file or a partial certificate.

Found in https://issues.redhat.com/browse/OCPBUGS-58262 .

Version-Release number of selected component (if applicable):

723cdc479e5092830af1c5fd3715a8560d284d16

How reproducible:

Unknown, by code inspection

Steps to Reproduce:

N/A

Actual results:

N/A

Expected results:

N/A

Additional info:

Assignee:: Flavian Missi

Reporter:: Miloslav Trmač

Need Info From:: None

Contributors:: None

QA Contact:: XiuJuan Wang

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2025/10/30 12:06 AM

Updated:: 2025/11/03 12:28 PM