confile: prevent recursion when parsing networks

Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32558
Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32484
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/confile.c b/src/lxc/confile.c
index 9ff8f90f661804da2333a457c268265885605476..d6d77ab5eeda20f9b0c252f859c7ba8c04a52c13 100644 (file)
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -4759,6 +4759,8 @@ static struct lxc_config_t *get_network_config_ops(const char *key,
                *idx_end = '.';
                if (strlen(idx_end + 1) == 0)
                        return log_error_errno(NULL, EINVAL, "No subkey in network configuration key \"%s\"", key);
+               if (isdigit(*(idx_end + 1)))
+                       return log_error_errno(NULL, EINVAL, "Key can't contain more than one index");
 
                memmove(copy + STRLITERALLEN("lxc.net."), idx_end + 1, strlen(idx_end + 1));
                copy[strlen(key) - (numstrlen + 1)] = '\0';