Dan Carpenter d41ceafe3d smackfs: Prevent underflow in smk_set_cipso() ...

[ Upstream commit 3ad49d37cf5759c3b8b68d02e3563f633d9c1aee ]

There is a upper bound to "catlen" but no lower bound to prevent
negatives.  I don't see that this necessarily causes a problem but we
may as well be safe.

Fixes: e114e47377 ("Smack: Simplified Mandatory Access Control Kernel")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-09-13 09:42:42 +02:00

..

apparmor

apparmor: fix missing error check for rhashtable_insert_fast

2023-07-19 16:22:07 +02:00

bpf

…

integrity

ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig

2023-09-13 09:42:42 +02:00

keys

security: keys: perform capable check only on privileged operations

2023-09-13 09:42:23 +02:00

landlock

landlock: Fix documentation style

2022-09-29 18:43:04 +02:00

loadpin

LoadPin: Ignore the "contents" argument of the LSM hooks

2022-12-31 13:33:07 +01:00

lockdown

lockdown: ratelimit denial messages

2022-09-14 07:37:50 -04:00

safesetid

LSM: SafeSetID: Add setgroups() security policy handling

2022-07-15 18:24:42 +00:00

selinux

vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing

2023-09-13 09:42:28 +02:00

smack

smackfs: Prevent underflow in smk_set_cipso()

2023-09-13 09:42:42 +02:00

tomoyo

tomoyo: fix broken dependency on *.conf.default

2023-02-01 08:34:06 +01:00

yama

…

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-10-28 06:44:33 -04:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-07 11:11:56 +01:00

inode.c

…

Kconfig

x86/retbleed: Add fine grained Kconfig knobs

2022-06-29 17:43:41 +02:00

Kconfig.hardening

randstruct: disable Clang 15 support

2023-02-25 11:25:43 +01:00

lsm_audit.c

lsm: clean up redundant NULL pointer check

2022-08-15 22:44:01 -04:00

Makefile

…

min_addr.c

…

security.c

vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing

2023-09-13 09:42:28 +02:00