From 9de61e7014360f0195e78713946053454582c9f7 Mon Sep 17 00:00:00 2001 From: Norman Feske Date: Wed, 3 Mar 2021 17:35:57 +0100 Subject: [PATCH] base: detect truncated session args This patch reflects the truncation of session arguments (e.g., by very long session labels) by denying the session request. Fixes #4037 --- repos/base/src/lib/base/component.cc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/repos/base/src/lib/base/component.cc b/repos/base/src/lib/base/component.cc index 568be31efb..8973e3b6b5 100644 --- a/repos/base/src/lib/base/component.cc +++ b/repos/base/src/lib/base/component.cc @@ -121,6 +121,11 @@ namespace { Parent::Session_args const &args, Affinity const &affinity) override { + if (!args.valid_string()) { + warning(name.string(), " session denied because of truncated arguments"); + throw Service_denied(); + } + Mutex::Guard guard(_mutex); /*