confile: prevent recursion when parsing networks

Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32558 Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32484Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

confile: prevent recursion when parsing networks
0274a0ee · Christian Brauner · 1f860b31 · 0274a0ee
Unverified Commit 0274a0ee authored Mar 27, 2021 by Christian Brauner
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

confile.c src/lxc/confile.c +2 -0

No files found.
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -4759,6 +4759,8 @@ static struct lxc_config_t *get_network_config_ops(const char *key,
 		*idx_end = '.';
 		if (strlen(idx_end + 1) == 0)
 			return log_error_errno(NULL, EINVAL, "No subkey in network configuration key \"%s\"", key);
+		if (isdigit(*(idx_end + 1)))
+			return log_error_errno(NULL, EINVAL, "Key can't contain more than one index");

 		memmove(copy + STRLITERALLEN("lxc.net."), idx_end + 1, strlen(idx_end + 1));
 		copy[strlen(key) - (numstrlen + 1)] = '\0';