GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder
The highest tagged major version isv2.
unhanger
packageThis package is not in the latest version of its module.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
- Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
- Tagged version
Modules with tagged versions give importers more predictable builds.
Stable versionWhen a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Open Source Insights
Documentation¶
Index¶
Constants¶
const (// HungJobDuration is the duration of time since the last update to a job// before it is considered hung.HungJobDuration = 5 *time.Minute// HungJobExitTimeout is the duration of time that provisioners should allow// for a graceful exit upon cancellation due to failing to send an update to// a job.//// Provisioners should avoid keeping a job "running" for longer than this// time after failing to send an update to the job.HungJobExitTimeout = 3 *time.Minute// MaxJobsPerRun is the maximum number of hung jobs that the detector will// terminate in a single run.MaxJobsPerRun = 10)
Variables¶
var HungJobLogMessages = []string{"","====================","Coder: Build has been detected as hung for 5 minutes and will be terminated.","====================","",}HungJobLogMessages are written to provisioner job logs when a job is hung andterminated.
Functions¶
This section is empty.
Types¶
typeDetector¶
type Detector struct {// contains filtered or unexported fields}Detector automatically detects hung provisioner jobs, sends messages into thebuild log and terminates them as failed.
funcNew¶
func New(ctxcontext.Context, dbdatabase.Store, pubpubsub.Pubsub, logslog.Logger, tick <-chantime.Time) *Detector
New returns a new hang detector.
func (*Detector)Start¶
func (d *Detector) Start()
Start will cause the detector to detect and unhang provisioner jobs on everytick from its channel. It will stop when its context is Done, or when itschannel is closed.
Start should only be called once.
func (*Detector)WithStatsChannel¶
WithStatsChannel will cause Executor to push a RunStats to ch afterevery tick. This push is blocking, so if ch is not read, the detector willhang. This should only be used in tests.
typeStats¶
type Stats struct {// TerminatedJobIDs contains the IDs of all jobs that were detected as hung and// terminated.TerminatedJobIDs []uuid.UUID// Error is the fatal error that occurred during the last run of the// detector, if any. Error may be set to AcquireLockError if the detector// failed to acquire a lock.Errorerror}Stats contains statistics about the last run of the detector.
Source Files