core: validate input cgroup path more prudently

YHNdnzj · bluca · commit 54588d2dedff · 2026-02-27T21:57:05.000Z
(cherry picked from commit efa6ba2) (cherry picked from commit 3cee294) (cherry picked from commit 1d22f70)
diff --git a/src/core/dbus-manager.c b/src/core/dbus-manager.c
@@ -621,6 +621,12 @@ static int method_get_unit_by_control_group(sd_bus_message *message, void *userd
         if (r < 0)
                 return r;
 
+        if (!path_is_absolute(cgroup))
+                return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not absolute: %s", cgroup);
+
+        if (!path_is_normalized(cgroup))
+                return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not normalized: %s", cgroup);
+
         u = manager_get_unit_by_cgroup(m, cgroup);
         if (!u)
                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
