From 7bf26d44b08de167b18257b5ddf5912585c840df Mon Sep 17 00:00:00 2001
From: John Howard <jhoward@microsoft.com>
Date: Tue, 30 Jun 2015 14:40:27 -0700
Subject: [PATCH] Validate status= filter to docker ps

Signed-off-by: John Howard <jhoward@microsoft.com>
---
 daemon/list.go                        |  3 +++
 daemon/state.go                       | 12 ++++++++++++
 integration-cli/docker_cli_ps_test.go |  5 +++++
 3 files changed, 20 insertions(+)

diff --git a/daemon/list.go b/daemon/list.go
index 2b38b1ed96..c7b353d780 100644
--- a/daemon/list.go
+++ b/daemon/list.go
@@ -53,6 +53,9 @@ func (daemon *Daemon) Containers(config *ContainersConfig) ([]*types.Container,
 
 	if i, ok := psFilters["status"]; ok {
 		for _, value := range i {
+			if !isValidStateString(value) {
+				return nil, errors.New("Unrecognised filter value for status")
+			}
 			if value == "exited" || value == "created" {
 				all = true
 			}
diff --git a/daemon/state.go b/daemon/state.go
index 0270c88e88..861671d7ad 100644
--- a/daemon/state.go
+++ b/daemon/state.go
@@ -86,6 +86,18 @@ func (s *State) StateString() string {
 	return "exited"
 }
 
+func isValidStateString(s string) bool {
+	if s != "paused" &&
+		s != "restarting" &&
+		s != "running" &&
+		s != "dead" &&
+		s != "created" &&
+		s != "exited" {
+		return false
+	}
+	return true
+}
+
 func wait(waitChan <-chan struct{}, timeout time.Duration) error {
 	if timeout < 0 {
 		<-waitChan
diff --git a/integration-cli/docker_cli_ps_test.go b/integration-cli/docker_cli_ps_test.go
index 86a85b7e05..a88480c513 100644
--- a/integration-cli/docker_cli_ps_test.go
+++ b/integration-cli/docker_cli_ps_test.go
@@ -236,6 +236,11 @@ func (s *DockerSuite) TestPsListContainersFilterStatus(c *check.C) {
 		c.Fatalf("Expected id %s, got %s for running filter, output: %q", secondID[:12], containerOut, out)
 	}
 
+	out, _, _ = dockerCmdWithTimeout(time.Second*60, "ps", "-a", "-q", "--filter=status=rubbish")
+	if !strings.Contains(out, "Unrecognised filter value for status") {
+		c.Fatalf("Expected error response due to invalid status filter output: %q", out)
+	}
+
 }
 
 func (s *DockerSuite) TestPsListContainersFilterID(c *check.C) {