libpod: fix nil pointer dereference in getHostsEntries

lsm5 · lsm5 · commit 767a9af75fe1 · 2025-12-22T11:05:51.000-05:00
When NetMode.IsPasta() is true but pastaResult is nil (which can happen during container setup failures or in certain edge cases), accessing c.pastaResult.IPAddresses causes a panic. Add a nil check for c.pastaResult before accessing its fields, matching the pattern used elsewhere in the codebase. Fixes rootless test failures in PR containers#27338. Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
diff --git a/libpod/container_internal_common.go b/libpod/container_internal_common.go
@@ -2350,7 +2350,7 @@ func (c *Container) getHostsEntries() etchosts.HostEntries {
 		entries = etchosts.GetNetworkHostEntries(c.state.NetworkStatus, names...)
 	case c.config.NetMode.IsPasta():
 		// this should never be the case but check just to be sure and not panic
-		if len(c.pastaResult.IPAddresses) > 0 {
+		if c.pastaResult != nil && len(c.pastaResult.IPAddresses) > 0 {
 			entries = etchosts.HostEntries{{IP: c.pastaResult.IPAddresses[0].String(), Names: names}}
 		}
 	default:

Original file line number	Diff line number	Diff line change
`@@ -2350,7 +2350,7 @@ func (c *Container) getHostsEntries() etchosts.HostEntries {`
`2350`	`2350`	`entries = etchosts.GetNetworkHostEntries(c.state.NetworkStatus, names...)`
`2351`	`2351`	`case c.config.NetMode.IsPasta():`
`2352`	`2352`	`// this should never be the case but check just to be sure and not panic`
`2353`		`- if len(c.pastaResult.IPAddresses) > 0 {`
	`2353`	`+ if c.pastaResult != nil && len(c.pastaResult.IPAddresses) > 0 {`
`2354`	`2354`	`entries = etchosts.HostEntries{{IP: c.pastaResult.IPAddresses[0].String(), Names: names}}`
`2355`	`2355`	`}`
`2356`	`2356`	`default:`