seccomp: re-add action parse error handling

This can happen when the 'errno' action can't parse its supplied number. Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com> Fixes: f67c94d0 ("seccomp: parse_v2_rules()")

seccomp: re-add action parse error handling
f858dd50 · Wolfgang Bumiller · 8cd059df · f858dd50
Commit f858dd50 authored May 25, 2018 by Wolfgang Bumiller
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

seccomp.c src/lxc/seccomp.c +5 -0

No files found.
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -257,6 +257,11 @@ static int parse_v2_rules(char *line, uint32_t def_action,
 	/* read optional action which follows the syscall */
 	rules->action = get_v2_action(tmp, def_action);
+	if (rules->action == -1) {
+		ERROR("Failed to interpret action");
+		ret = -1;
+		goto out;
+	}
 	ret = 0;
 	rules->args_num = 0;