From 1c73b60b4d9db8d5b47b32cedcec9d9de647194f Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Mon, 11 Jun 2018 12:31:02 +0900 Subject: [PATCH] util-lib: reject too long path for timedate_is_valid() This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8827. --- src/basic/time-util.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/basic/time-util.c b/src/basic/time-util.c index 031b8716408..64ee777d01b 100644 --- a/src/basic/time-util.c +++ b/src/basic/time-util.c @@ -1311,6 +1311,9 @@ bool timezone_is_valid(const char *name, int log_level) { if (slash) return false; + if (p - name >= PATH_MAX) + return false; + t = strjoina("/usr/share/zoneinfo/", name); fd = open(t, O_RDONLY|O_CLOEXEC); -- 2.47.3