From 3e9ed9851432892894c474cd6ee54a7b7457b7bb Mon Sep 17 00:00:00 2001
From: Mike Yuan <me@yhndnzj.com>
Date: Sun, 11 Jan 2026 15:51:55 +0100
Subject: [PATCH] logind-varlink: add missing validation for session class

D-Bus CreateSession() method carries this check, but the varlink
one didn't.
---
 src/login/logind-varlink.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/login/logind-varlink.c b/src/login/logind-varlink.c
index ee83ed1b892..a17f64271e8 100644
--- a/src/login/logind-varlink.c
+++ b/src/login/logind-varlink.c
@@ -184,6 +184,9 @@ static int vl_method_create_session(sd_varlink *link, sd_json_variant *parameter
         if (r != 0)
                 return r;
 
+        if (p.class == SESSION_NONE)
+                return sd_varlink_error_invalid_parameter_name(link, "Class");
+
         Seat *seat = NULL;
         if (p.seat) {
                 seat = hashmap_get(m->seats, p.seat);