Dan Carpenter 32e0609273 smackfs: Prevent underflow in smk_set_cipso() ...

[ Upstream commit 3ad49d37cf ]

There is a upper bound to "catlen" but no lower bound to prevent
negatives.  I don't see that this necessarily causes a problem but we
may as well be safe.

Fixes: e114e47377 ("Smack: Simplified Mandatory Access Control Kernel")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-09-19 12:22:39 +02:00

..

apparmor

apparmor: fix missing error check for rhashtable_insert_fast

2023-07-23 13:47:30 +02:00

bpf

…

integrity

ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig

2023-09-19 12:22:38 +02:00

keys

security: keys: perform capable check only on privileged operations

2023-09-19 12:22:28 +02:00

landlock

landlock: Fix same-layer rule unions

2022-06-09 10:23:24 +02:00

loadpin

LoadPin: Ignore the "contents" argument of the LSM hooks

2022-12-31 13:14:45 +01:00

lockdown

…

safesetid

…

selinux

selinux: set next pointer before attaching to list

2023-08-30 16:18:17 +02:00

smack

smackfs: Prevent underflow in smk_set_cipso()

2023-09-19 12:22:39 +02:00

tomoyo

tomoyo: fix broken dependency on *.conf.default

2023-02-01 08:27:05 +01:00

yama

…

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-11-10 18:15:39 +01:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-12 11:58:59 +01:00

inode.c

…

Kconfig

x86/retbleed: Add fine grained Kconfig knobs

2022-07-23 12:54:10 +02:00

Kconfig.hardening

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

2022-12-31 13:14:46 +01:00

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

ima: Align ima_file_mmap() parameters with mmap_file LSM hook

2023-03-10 09:40:03 +01:00