2
56%
main: 56%

Ran 09 Jul 2025 08:03PM UTC

Files 36

Run time 2s

Badge

Embed ▾

Committed 16 Jun 2025 02:39PM UTC coverage: 31.647%. Remained the same

Job # 16178979042.2

Build Type

push

github

Committed by

drakenclimber

Commit Message

api.c: prevent array out-of-bounds access in cgroup_parse_rules_file

In the function src/api.c/cgroup_parse_rules_file, the condition of loop:

for (i = 0; lst->tail->controllers[i]; i++)
        cgroup_dbg(" %s", lst->tail->controllers[i]);

allows accessing lst->tail->controllers[MAX_MNT_ELEMENTS] if
lst->tail->controllers is full and lacks a terminating NULL.

Add explicit bounds checking (i < MAX_MNT_ELEMENTS) while maintaining
the NULL check. This ensures that there will never be reading past the
array boundaries regardless of its content.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Signed-off-by: Mikhail Dmitrichenko <m.dmitrichenko222@gmail.com>
Acked-by: Kamalesh Babulal <kamalesh.babulal@oracle.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>

Run Details

3184 of 10061 relevant lines covered (31.65%)

55.24 hits per line

drakenclimber / libcgroup / 16178979042 / 2
56%
main: 56%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job Sudo Tests - 16178979042.2

drakenclimber / libcgroup / 16178979042 / 2 56% main: 56%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job Sudo Tests - 16178979042.2

drakenclimber / libcgroup / 16178979042 / 2
56%
main: 56%

README BADGES
x