linux

mirror of https://github.com/FEX-Emu/linux.git synced 2025-01-15 14:10:43 +00:00

History

Ahmed S. Darwish b500ce8d24 smackfs: do not trust `count' in inodes write()s

Smackfs write() implementation does not put a higher bound on the number of
bytes to copy from user-space.  This may lead to a DOS attack if a malicious
`count' field is given.

Assure that given `count' is exactly the length needed for a /smack/load rule.
 In case of /smack/cipso where the length is relative, assure that `count'
does not exceed the size needed for a buffer representing maximum possible
number of CIPSO 2.2 categories.

Signed-off-by: Ahmed S. Darwish <darwish.07@gmail.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2008-03-13 13:11:43 -07:00

keys

Convert ERR_PTR(PTR_ERR(p)) instances to ERR_CAST(p)

2008-02-07 08:42:26 -08:00

selinux

LSM/SELinux: Interfaces to allow FS to control mount options

2008-03-06 08:40:53 +11:00

smack

smackfs: do not trust `count' in inodes write()s

2008-03-13 13:11:43 -07:00

capability.c

Implement file posix capabilities