cmd/fsu: check uid range before syscall

This limits potential exploits to the fortify uid range.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>

1 files changed, 5 insertions, 0 deletions

diff --git a/cmd/fsu/main.go b/cmd/fsu/main.go
index 1ec3a4bc..d232818a 100644
--- a/cmd/fsu/main.go
+++ b/cmd/fsu/main.go
@@ -123,6 +123,11 @@ func main() {
 		suppGroups = []int{uid}
 	}
 
+	// final bounds check to catch any bugs
+	if uid < 1000000 || uid >= 2000000 {
+		panic("uid out of bounds")
+	}
+
 	// careful! users in the allowlist is effectively allowed to drop groups via fsu
 
 	if err := syscall.Setresgid(uid, uid, uid); err != nil {