docker: avoid concurrent map access panic

tonistiigi · zhsj · commit ec752e8ba138 · 2021-01-15T01:17:59.000+08:00
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> (cherry picked from commit bf323c5) Signed-off-by: Shengjing Zhu <zhsj@debian.org>
diff --git a/remotes/docker/resolver.go b/remotes/docker/resolver.go
@@ -525,7 +525,10 @@ func (r *request) do(ctx context.Context) (*http.Response, error) {
 	if err != nil {
 		return nil, err
 	}
-	req.Header = r.header
+	req.Header = http.Header{} // headers need to be copied to avoid concurrent map access
+	for k, v := range r.header {
+		req.Header[k] = v
+	}
 	if r.body != nil {
 		body, err := r.body()
 		if err != nil {
