Huaxin Lu c8d5d81940 ima: Fix a potential integer overflow in ima_appraise_measurement ...

[ Upstream commit d2ee2cfc4a ]

When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be
negative, which may cause the integer overflow problem.

Fixes: 39b0709636 ("ima: Implement support for module-style appended signatures")
Signed-off-by: Huaxin Lu <luhuaxin1@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-07-21 21:24:18 +02:00

..

apparmor

apparmor: fix error check

2021-11-18 19:16:58 +01:00

bpf

…

integrity

ima: Fix a potential integer overflow in ima_appraise_measurement

2022-07-21 21:24:18 +02:00

keys

KEYS: trusted: tpm2: Fix migratable logic

2022-06-14 18:36:25 +02:00

landlock

landlock: Fix same-layer rule unions

2022-06-09 10:23:24 +02:00

loadpin

…

lockdown

…

safesetid

LSM: SafeSetID: Mark safesetid_initialized as __initdata

2021-06-10 09:52:32 -07:00

selinux

selinux: fix bad cleanup on error in hashtab_duplicate()

2022-05-25 09:57:27 +02:00

smack

Fix incorrect type in assignment of ipv6 port for audit

2022-04-08 14:23:55 +02:00

tomoyo

TOMOYO: fix __setup handlers return values

2022-04-08 14:23:35 +02:00

yama

…

commoncap.c

fs: support mapped mounts of mapped filesystems

2022-07-02 16:41:17 +02:00

device_cgroup.c

…

inode.c

…

Kconfig

fortify: Explicitly disable Clang support

2021-11-21 13:44:13 +01:00

Kconfig.hardening

hardening: Clarify Kconfig text for auto-var-init

2021-07-20 23:02:59 -07:00

lsm_audit.c

audit: remove unnecessary 'ret' initialization

2021-06-11 13:21:28 -04:00

Makefile

security: remove unneeded subdir-$(CONFIG_...)

2021-09-03 08:17:20 +09:00

min_addr.c

…

security.c

lockdown: also lock down previous kgdb use

2022-05-25 09:57:37 +02:00