seccomp: assert that __reserved is 0 in notify responses

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

diff --git a/src/lxc/seccomp.c b/src/lxc/seccomp.c
index 48c4e26f0d7977a00f474d0a09cd0e488ad145bd..af87ab922165e7cda842359992ce7de0b7ac41da 100644 (file)
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1438,6 +1438,12 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
 
        close_prot_errno_disarm(fd_mem);
 
+       if (msg.__reserved != 0) {
+               ERROR("Proxy filled reserved data in response");
+               seccomp_notify_default_answer(fd, req, resp, hdlr);
+               goto out;
+       }
+
        if (resp->id != req_id) {
                resp->id = req_id;
                ERROR("Proxy returned response with illegal id");