diff options
| author | Christian Göttsche <cgzones@googlemail.com> | 2025-05-11 20:30:04 +0300 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2026-05-07 02:43:18 +0300 |
| commit | 9f515660c8297246c4e3565c814ccd16368d74e9 (patch) | |
| tree | c9a05f673cd55c8bd705519c8e4b7a588f0170d4 /include | |
| parent | 18fa21f10d008a0fc22565109c7d38f304295912 (diff) | |
| download | linux-9f515660c8297246c4e3565c814ccd16368d74e9.tar.xz | |
selinux: check length fields in policies
In multiple places the binary policy announces how many items of some
kind are to be expected next. Before reading them the kernel already
allocates enough memory for that announced size. Validate that the
remaining input size can actually fit the announced items, to avoid OOM
issues on malformed binary policies.
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
[PM: manual merge fuzz fixups, style fixes]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions