]> git.ipfire.org Git - people/arne_f/kernel.git/commit
auditsc: audit_krule mask accesses need bounds checking
authorAndy Lutomirski <luto@amacapital.net>
Thu, 29 May 2014 03:09:58 +0000 (23:09 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 16 Jun 2014 20:44:09 +0000 (13:44 -0700)
commite015cef70226c6b94ee575895fde595d925b42c0
tree6f791683761c399653defb0591bbdbfc6448c13b
parent4e358517b2810788777196f038f5a0b3b9936a6a
auditsc: audit_krule mask accesses need bounds checking

commit a3c54931199565930d6d84f4c3456f6440aefd41 upstream.

Fixes an easy DoS and possible information disclosure.

This does nothing about the broken state of x32 auditing.

eparis: If the admin has enabled auditd and has specifically loaded
audit rules.  This bug has been around since before git.  Wow...

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/auditsc.c