From 1afad1c0ad95b885b6f3d9916531ea1f1aebb7af Mon Sep 17 00:00:00 2001
From: Ted Yu <yute@vmware.com>
Date: Tue, 19 Nov 2019 13:44:32 -0800
Subject: [PATCH] vc: Sandbox#Annotations should use annotationsLock read lock

Fixes #2222

Signed-off-by: Ted Yu <yuzhihong@gmail.com>
---
 virtcontainers/sandbox.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/virtcontainers/sandbox.go b/virtcontainers/sandbox.go
index d8d548ef31..793f2e5425 100644
--- a/virtcontainers/sandbox.go
+++ b/virtcontainers/sandbox.go
@@ -225,6 +225,9 @@ func (s *Sandbox) Logger() *logrus.Entry {
 
 // Annotations returns any annotation that a user could have stored through the sandbox.
 func (s *Sandbox) Annotations(key string) (string, error) {
+	s.annotationsLock.RLock()
+	defer s.annotationsLock.RUnlock()
+
 	value, exist := s.config.Annotations[key]
 	if !exist {
 		return "", fmt.Errorf("Annotations key %s does not exist", key)