mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-12-27 12:21:22 -05:00
coredump: don't allow ".." in coredump socket path
There's no point in allowing to walk upwards for the coredump socket. We already force userspace to give use a sane path, no symlinks, no magiclinks, and also block "..". Use an absolute path without any shenanigans. Link: https://lore.kernel.org/20250612-work-coredump-massage-v1-6-315c0c34ba94@kernel.org Signed-off-by: Christian Brauner <brauner@kernel.org>
This commit is contained in:
@@ -1418,6 +1418,10 @@ static inline bool check_coredump_socket(void)
|
||||
if (strlen(p) >= UNIX_PATH_MAX)
|
||||
return false;
|
||||
|
||||
/* Must not contain ".." in the path. */
|
||||
if (name_contains_dotdot(core_pattern))
|
||||
return false;
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user