confile: add missing prefix validation

Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32488
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/confile.c b/src/lxc/confile.c
index d6d77ab5eeda20f9b0c252f859c7ba8c04a52c13..836cc610e3a821b04eec2858c69b5acb8a988c02 100644 (file)
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -671,6 +671,8 @@ static int set_config_net_ipv4_address(const char *key, const char *value,
        } else {
                inetdev->prefix = config_ip_prefix(&inetdev->addr);
        }
+       if (inetdev->prefix > 32)
+               return ret_errno(EINVAL);
 
        /* If no broadcast address, let compute one from the
         * prefix and address.