b7ebf97389
Resolves: RHEL-155454, RHEL-155805, RHEL-155396, RHEL-158303, RHEL-158354, RHEL-143728, RHEL-168098, RHEL-143028
30 lines
1.1 KiB
Diff
30 lines
1.1 KiB
Diff
From e1c092e585f4cada10dbd79d0c31bfb9156edea0 Mon Sep 17 00:00:00 2001
|
|
From: Mike Yuan <me@yhndnzj.com>
|
|
Date: Thu, 26 Feb 2026 11:06:34 +0100
|
|
Subject: [PATCH] core: validate input cgroup path more prudently
|
|
|
|
(cherry picked from commit efa6ba2ab625aaa160ac435a09e6482fc63bdbe8)
|
|
|
|
Resolves: RHEL-155396
|
|
---
|
|
src/core/dbus-manager.c | 6 ++++++
|
|
1 file changed, 6 insertions(+)
|
|
|
|
diff --git a/src/core/dbus-manager.c b/src/core/dbus-manager.c
|
|
index 8e39d67a00..d516f30c96 100644
|
|
--- a/src/core/dbus-manager.c
|
|
+++ b/src/core/dbus-manager.c
|
|
@@ -622,6 +622,12 @@ static int method_get_unit_by_control_group(sd_bus_message *message, void *userd
|
|
if (r < 0)
|
|
return r;
|
|
|
|
+ if (!path_is_absolute(cgroup))
|
|
+ return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not absolute: %s", cgroup);
|
|
+
|
|
+ if (!path_is_normalized(cgroup))
|
|
+ return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not normalized: %s", cgroup);
|
|
+
|
|
u = manager_get_unit_by_cgroup(m, cgroup);
|
|
if (!u)
|
|
return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
|