af_unix: prevent oob writes

Fixes: Coverity 1473309 Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
lxc · Feb 26, 2021 · 82ba06f · 82ba06f
1 parent 90b9b14
commit 82ba06f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/lxc/af_unix.c b/src/lxc/af_unix.c
@@ -218,7 +218,7 @@ static ssize_t lxc_abstract_unix_recv_fds_iov(int fd,
 			 * which exceeds the kernel limit we know about so
 			 * close them and return an error.
 			 */
-			if (num_raw > KERNEL_SCM_MAX_FD) {
+			if (num_raw >= KERNEL_SCM_MAX_FD) {
 				for (idx = 0; idx < num_raw; idx++)
 					close(fds_raw[idx]);