From: Lennart Poettering <lennart@poettering.net>
Date: Sun, 1 Nov 2015 20:49:19 +0000 (+0100)
Subject: sd-daemon: verify NOTIFY_SOCKET path length
X-Git-Tag: v228.1~1^2~42
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=5d0e1fed3db3c6fb6ce6d795e705694a86d2371f

sd-daemon: verify NOTIFY_SOCKET path length
---

diff --git a/src/libelogind/sd-daemon/sd-daemon.c b/src/libelogind/sd-daemon/sd-daemon.c
index e10444f49..172409b73 100644
--- a/src/libelogind/sd-daemon/sd-daemon.c
+++ b/src/libelogind/sd-daemon/sd-daemon.c
@@ -436,6 +436,11 @@ _public_ int sd_pid_notify_with_fds(pid_t pid, int unset_environment, const char
                 goto finish;
         }
 
+        if (strlen(e) > sizeof(sockaddr.un.sun_path)) {
+                r = -EINVAL;
+                goto finish;
+        }
+
         fd = socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0);
         if (fd < 0) {
                 r = -errno;