From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Sat, 27 Mar 2021 19:49:19 +0000 (+0100)
Subject: confile: add missing prefix validation
X-Git-Tag: lxc-5.0.0~235^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=79d2f54fd5f26c69c6e0c3e5e813c9752ae0cc4c;p=thirdparty%2Flxc.git

confile: add missing prefix validation

Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32488
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---

diff --git a/src/lxc/confile.c b/src/lxc/confile.c
index 3c5cb9060..d53c4f880 100644
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -760,6 +760,8 @@ static int set_config_net_ipv4_address(const char *key, const char *value,
 	} else {
 		inetdev->prefix = config_ip_prefix(&inetdev->addr);
 	}
+	if (inetdev->prefix > 32)
+		return ret_errno(EINVAL);
 
 	/* If no broadcast address, let compute one from the
 	 * prefix and address.