From: Mike Yuan <me@yhndnzj.com>
Date: Sun, 11 Jan 2026 14:51:55 +0000 (+0100)
Subject: logind-varlink: add missing validation for session class
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3e9ed9851432892894c474cd6ee54a7b7457b7bb;p=thirdparty%2Fsystemd.git

logind-varlink: add missing validation for session class

D-Bus CreateSession() method carries this check, but the varlink
one didn't.
---

diff --git a/src/login/logind-varlink.c b/src/login/logind-varlink.c
index ee83ed1b892..a17f64271e8 100644
--- a/src/login/logind-varlink.c
+++ b/src/login/logind-varlink.c
@@ -184,6 +184,9 @@ static int vl_method_create_session(sd_varlink *link, sd_json_variant *parameter
         if (r != 0)
                 return r;
 
+        if (p.class == SESSION_NONE)
+                return sd_varlink_error_invalid_parameter_name(link, "Class");
+
         Seat *seat = NULL;
         if (p.seat) {
                 seat = hashmap_get(m->seats, p.seat);