]> git.ipfire.org Git - people/ms/linux.git/commit
smack: off by one error
authorAlan Cox <alan@linux.intel.com>
Thu, 26 Jul 2012 21:47:11 +0000 (14:47 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 9 Aug 2012 15:22:36 +0000 (08:22 -0700)
commit4e9cca830222266bc4d456d0ce7f13a376088e56
tree8eca15ad9621fd033e2a66e4c892233c5cf2b157
parent69f699e6189772036175b3b7d362c82b0d944d4d
smack: off by one error

commit 3b9fc37280c521b086943f9aedda767f5bf3b2d3 upstream.

Consider the input case of a rule that consists entirely of non space
symbols followed by a \0. Say 64 + \0

In this case strlen(data) = 64
kzalloc of subject and object are 64 byte objects
sscanfdata, "%s %s %s", subject, ...)

will put 65 bytes into subject.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/smack/smackfs.c