From 53834ef0dcb7cbf889232a2d9c1c5dceb83908f5 Mon Sep 17 00:00:00 2001
From: xtexChooser <xtexchooser@duck.com>
Date: Sun, 11 Jun 2023 08:50:04 +0800
Subject: [PATCH] fix(specgen): index out of range when unmask=[]

Fixes #18848

Signed-off-by: xtexChooser <xtexchooser@duck.com>
---
 pkg/specgen/generate/oci_linux.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/specgen/generate/oci_linux.go b/pkg/specgen/generate/oci_linux.go
index 2a1afbecc4..233b6c1eaf 100644
--- a/pkg/specgen/generate/oci_linux.go
+++ b/pkg/specgen/generate/oci_linux.go
@@ -57,7 +57,7 @@ func getCgroupPermissions(unmask []string) string {
 		return ro
 	}
 
-	if unmask != nil && unmask[0] == "ALL" {
+	if unmask != nil && len(unmask) != 0 && unmask[0] == "ALL" {
 		return rw
 	}