Jann Horn 9617058178 apparmor: enforce nullbyte at end of tag string ... commit 8404d7a674c49278607d19726e0acc0cae299357 upstream. A packed AppArmor policy contains null-terminated tag strings that are read by unpack_nameX(). However, unpack_nameX() uses string functions on them without ensuring that they are actually null-terminated, potentially leading to out-of-bounds accesses. Make sure that the tag string is null-terminated before passing it to strcmp(). Cc: stable@vger.kernel.org Fixes: 736ec752d9 ("AppArmor: policy routines for loading and unpacking policy") Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-07-10 09:56:31 +02:00
..
apparmor	apparmor: enforce nullbyte at end of tag string	2019-07-10 09:56:31 +02:00
integrity	ima: fix showing large 'violations' or 'runtime_measurements_count'	2018-11-21 09:27:35 +01:00
keys	KEYS: restrict /proc/keys by credentials at open time	2019-03-23 08:44:29 +01:00
selinux	selinux: never allow relabeling on context mounts	2019-05-16 19:45:03 +02:00
smack	smack: fix access permissions for keyring	2019-02-20 10:13:07 +01:00
tomoyo	mm: replace get_user_pages() write/force parameters with gup_flags	2018-12-17 21:55:16 +01:00
yama	Yama: Check for pid death before checking ancestry	2019-01-26 09:42:50 +01:00
commoncap.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-02-25 12:01:16 -08:00
device_cgroup.c	device_cgroup: fix RCU imbalance in error case	2019-04-27 09:34:02 +02:00
inode.c
Kconfig	KPTI: Rename to PAGE_TABLE_ISOLATION	2018-01-05 15:44:26 +01:00
lsm_audit.c	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-23 08:44:31 +01:00
Makefile
min_addr.c
security.c	LSM: Check for NULL cred-security on free	2019-01-26 09:42:50 +01:00