libpod: fix nil pointer dereference in getHostsEntries

lsm5 · lsm5 · commit dce5c563d8d8 · 2025-12-02T14:55:32.000-05:00
When NetMode.IsPasta() is true but pastaResult is nil (which can happen during container setup failures or in certain edge cases), accessing c.pastaResult.IPAddresses causes a panic. Add a nil check for c.pastaResult before accessing its fields, matching the pattern used elsewhere in the codebase. Fixes rootless test failures in PR containers#27338. Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
diff --git a/libpod/container_internal_common.go b/libpod/container_internal_common.go
@@ -2381,7 +2381,7 @@ func (c *Container) getHostsEntries() etchosts.HostEntries {
 		entries = etchosts.GetNetworkHostEntries(c.state.NetworkStatus, names...)
 	case c.config.NetMode.IsPasta():
 		// this should never be the case but check just to be sure and not panic
-		if len(c.pastaResult.IPAddresses) > 0 {
+		if c.pastaResult != nil && len(c.pastaResult.IPAddresses) > 0 {
 			entries = etchosts.HostEntries{{IP: c.pastaResult.IPAddresses[0].String(), Names: names}}
 		}
 	default:

Original file line number	Diff line number	Diff line change
`@@ -2381,7 +2381,7 @@ func (c *Container) getHostsEntries() etchosts.HostEntries {`
`2381`	`2381`	`entries = etchosts.GetNetworkHostEntries(c.state.NetworkStatus, names...)`
`2382`	`2382`	`case c.config.NetMode.IsPasta():`
`2383`	`2383`	`// this should never be the case but check just to be sure and not panic`
`2384`		`- if len(c.pastaResult.IPAddresses) > 0 {`
	`2384`	`+ if c.pastaResult != nil && len(c.pastaResult.IPAddresses) > 0 {`
`2385`	`2385`	`entries = etchosts.HostEntries{{IP: c.pastaResult.IPAddresses[0].String(), Names: names}}`
`2386`	`2386`	`}`
`2387`	`2387`	`default:`