Revision f7dc4c9a855a13dbb33294c9fc94f17af03f6291 authored by John Johansen on 08 November 2017, 16:09:52 UTC, committed by Linus Torvalds on 08 November 2017, 18:56:22 UTC
This came in yesterday, and I have verified our regression tests were missing this and it can cause an oops. Please apply. There is a an off-by-one comparision on sig against MAXMAPPED_SIG that can lead to a read outside the sig_map array if sig is MAXMAPPED_SIG. Fix this. Verified that the check is an out of bounds case that can cause an oops. Revised: add comparison fix to second case Fixes: cd1dbf76b23d ("apparmor: add the ability to mediate signals") Signed-off-by: Colin Ian King <colin.king@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent fbc3edf
File | Mode | Size |
---|---|---|
Kconfig | -rw-r--r-- | 3.4 KB |
Makefile | -rw-r--r-- | 672 bytes |
blk.c | -rw-r--r-- | 8.7 KB |
btt.c | -rw-r--r-- | 39.4 KB |
btt.h | -rw-r--r-- | 5.9 KB |
btt_devs.c | -rw-r--r-- | 9.0 KB |
bus.c | -rw-r--r-- | 28.2 KB |
claim.c | -rw-r--r-- | 8.0 KB |
core.c | -rw-r--r-- | 17.8 KB |
dax_devs.c | -rw-r--r-- | 3.4 KB |
dimm.c | -rw-r--r-- | 2.4 KB |
dimm_devs.c | -rw-r--r-- | 16.1 KB |
e820.c | -rw-r--r-- | 2.1 KB |
label.c | -rw-r--r-- | 31.2 KB |
label.h | -rw-r--r-- | 4.6 KB |
namespace_devs.c | -rw-r--r-- | 64.8 KB |
nd-core.h | -rw-r--r-- | 4.8 KB |
nd.h | -rw-r--r-- | 11.5 KB |
pfn.h | -rw-r--r-- | 1.6 KB |
pfn_devs.c | -rw-r--r-- | 18.2 KB |
pmem.c | -rw-r--r-- | 14.1 KB |
pmem.h | -rw-r--r-- | 886 bytes |
region.c | -rw-r--r-- | 4.5 KB |
region_devs.c | -rw-r--r-- | 28.3 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...