Tetsuo Handa
5f9880403e
smackfs: restrict bytes count in smk_set_cipso()
commit 49ec114a6e62d8d320037ce71c1aaf9650b3cafd upstream.
Oops, I failed to update subject line.
From 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001
From: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Date: Mon, 12 Apr 2021 22:25:06 +0900
Subject: smackfs: restrict bytes count in smk_set_cipso()
Commit 7ef4c19d245f3dc2 ("smackfs: restrict bytes count in smackfs write
functions") missed that count > SMK_CIPSOMAX check applies to only
format == SMK_FIXED24_FMT case.
Reported-by: syzbot <syzbot+77c53db50c9fff774e8e@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
2021-07-20 16:21:10 +02:00 |
| .. |
|
apparmor
|
apparmor: enforce nullbyte at end of tag string
|
2019-07-10 09:55:29 +02:00 |
|
integrity
|
ima: Don't ignore errors from crypto_shash_update()
|
2020-10-29 09:05:32 +01:00 |
|
keys
|
KEYS: trusted: Fix migratable=1 failing
|
2021-03-03 17:44:42 +01:00 |
|
loadpin
|
LSM: LoadPin: provide enablement CONFIG
|
2016-05-17 20:10:30 +10:00 |
|
selinux
|
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
|
2021-07-20 16:21:07 +02:00 |
|
smack
|
smackfs: restrict bytes count in smk_set_cipso()
|
2021-07-20 16:21:10 +02:00 |
|
tomoyo
|
mm: replace get_user_pages_remote() write/force parameters with gup_flags
|
2016-10-19 08:12:02 -07:00 |
|
yama
|
Yama: Check for pid death before checking ancestry
|
2019-01-23 08:10:54 +01:00 |
|
commoncap.c
|
exec: Always set cap_ambient in cap_bprm_set_creds
|
2020-06-03 08:16:41 +02:00 |
|
device_cgroup.c
|
device_cgroup: fix RCU imbalance in error case
|
2019-04-27 09:34:46 +02:00 |
|
inode.c
|
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
2016-10-10 20:16:43 -07:00 |
|
Kconfig
|
KPTI: Rename to PAGE_TABLE_ISOLATION
|
2018-01-05 15:46:35 +01:00 |
|
lsm_audit.c
|
dump_common_audit_data(): fix racy accesses to ->d_name
|
2021-01-23 15:38:17 +01:00 |
|
Makefile
|
LSM: LoadPin for kernel file loading restrictions
|
2016-04-21 10:47:27 +10:00 |
|
min_addr.c
|
|
|
|
security.c
|
LSM: Check for NULL cred-security on free
|
2019-01-23 08:10:55 +01:00 |