make big codeql happy

Vanilla-OS · Aug 10, 2024 · 300fea0 · 300fea0
1 parent 692086e
commit 300fea0
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/core/compile.go b/core/compile.go
@@ -2,6 +2,7 @@ package core
 
 import (
 	"fmt"
+	"math"
 	"os"
 	"os/exec"
 	"syscall"
@@ -72,7 +73,11 @@ func compileDocker(recipe api.Recipe, gid int, uid int) error {
 	cmd.Stderr = os.Stderr
 	cmd.Dir = recipe.ParentPath
 	cmd.SysProcAttr = &syscall.SysProcAttr{}
-	cmd.SysProcAttr.Credential = &syscall.Credential{Uid: uint32(uid), Gid: uint32(gid)}
+	if uid > 0 && uid <= math.MaxUint32 && gid > 0 && gid <= math.MaxUint32 {
+		cmd.SysProcAttr.Credential = &syscall.Credential{Uid: uint32(uid), Gid: uint32(gid)}
+	} else {
+		return fmt.Errorf("uid and gid exceed uint32")
+	}
 
 	return cmd.Run()
 }