Revision f7dc4c9a855a13dbb33294c9fc94f17af03f6291 authored by John Johansen on 08 November 2017, 16:09:52 UTC, committed by Linus Torvalds on 08 November 2017, 18:56:22 UTC
This came in yesterday, and I have verified our regression tests
were missing this and it can cause an oops. Please apply.
There is a an off-by-one comparision on sig against MAXMAPPED_SIG
that can lead to a read outside the sig_map array if sig
is MAXMAPPED_SIG. Fix this.
Verified that the check is an out of bounds case that can cause an oops.
Revised: add comparison fix to second case
Fixes: cd1dbf76b23d ("apparmor: add the ability to mediate signals")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent fbc3edf
| File | Mode | Size |
|---|---|---|
| Kconfig | -rw-r--r-- | 3.4 KB |
| Makefile | -rw-r--r-- | 672 bytes |
| blk.c | -rw-r--r-- | 8.7 KB |
| btt.c | -rw-r--r-- | 39.4 KB |
| btt.h | -rw-r--r-- | 5.9 KB |
| btt_devs.c | -rw-r--r-- | 9.0 KB |
| bus.c | -rw-r--r-- | 28.2 KB |
| claim.c | -rw-r--r-- | 8.0 KB |
| core.c | -rw-r--r-- | 17.8 KB |
| dax_devs.c | -rw-r--r-- | 3.4 KB |
| dimm.c | -rw-r--r-- | 2.4 KB |
| dimm_devs.c | -rw-r--r-- | 16.1 KB |
| e820.c | -rw-r--r-- | 2.1 KB |
| label.c | -rw-r--r-- | 31.2 KB |
| label.h | -rw-r--r-- | 4.6 KB |
| namespace_devs.c | -rw-r--r-- | 64.8 KB |
| nd-core.h | -rw-r--r-- | 4.8 KB |
| nd.h | -rw-r--r-- | 11.5 KB |
| pfn.h | -rw-r--r-- | 1.6 KB |
| pfn_devs.c | -rw-r--r-- | 18.2 KB |
| pmem.c | -rw-r--r-- | 14.1 KB |
| pmem.h | -rw-r--r-- | 886 bytes |
| region.c | -rw-r--r-- | 4.5 KB |
| region_devs.c | -rw-r--r-- | 28.3 KB |
Computing file changes ...
