From f47ac0d430198872ce111fa77dec056539b94a64 Mon Sep 17 00:00:00 2001
From: Daniele Valeriani <daniele@valeriani.co.uk>
Date: Mon, 2 Jul 2018 22:30:22 +0200
Subject: [PATCH] Validate the value of cpu_cfs_period

---
 client/driver/docker.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/client/driver/docker.go b/client/driver/docker.go
index 09dd21a05..070f6e3e3 100644
--- a/client/driver/docker.go
+++ b/client/driver/docker.go
@@ -1242,6 +1242,9 @@ func (d *DockerDriver) createContainerConfig(ctx *ExecContext, task *structs.Tas
 	if driverConfig.CPUHardLimit {
 		numCores := runtime.NumCPU()
 		percentTicks := float64(task.Resources.CPU) / float64(d.node.Resources.CPU)
+		if driverConfig.CPUCFSPeriod < 0 || driverConfig.CPUCFSPeriod > 1000000 {
+			return c, fmt.Errorf("invalid value for cpu_cfs_period")
+		}
 		if driverConfig.CPUCFSPeriod == 0 {
 			driverConfig.CPUCFSPeriod = defaultCFSPeriodUS
 		}