Pengpeng HouandGreg Kroah-Hartman 0b9f8282b4 evm: terminate and bound the evm_xattrs read buffer ...

[ Upstream commit 11143a19f5 ]

evm_read_xattrs() allocates size + 1 bytes, fills them from the list of
enabled xattrs, and then passes strlen(temp) to
simple_read_from_buffer(). When no configured xattrs are enabled, the
fill loop stores nothing and temp[0] remains uninitialized, so strlen()
reads beyond initialized memory.

Explicitly terminate the buffer after allocation, use snprintf() for
each formatted line, and pass the accumulated length, without risk of
truncation, to simple_read_from_buffer().

Fixes: fa516b66a1 ("EVM: Allow runtime modification of the set of verified xattrs")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Reviewed-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-07-24 15:54:34 +02:00

..

evm

evm: terminate and bound the evm_xattrs read buffer

2026-07-24 15:54:34 +02:00

ima

ima: check return value of crypto_shash_final() in boot aggregate

2026-06-01 17:39:16 +02:00

platform_certs

…

digsig_asymmetric.c

…

digsig.c

…

iint.c

…

integrity_audit.c

…

integrity.h

…

Kconfig

…

Makefile

…