Skip to content

integrity: NULL pointer dereference fixes

Dmitry Kasatkin lkml stable 3 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest3 patches 2 repliesIn review
  2. v22 patches 4 repliesSuperseded
  3. v12 patches 5 repliesSuperseded

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3ima: check xattr value length and type in the ima_inode_setxattr()security/integrity/ima/ima_appraise.c security/integrity/integrity.h+3 -00 replies
2/3ima: limit file hash setting by user to fix and log modessecurity/integrity/ima/ima_appraise.c+6 -20 replies
3/3evm: check xattr value length and type in evm_inode_setxattr()security/integrity/evm/evm_main.c+8 -32 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v3 yet.

Read the v3 thread

Cover letter [PATCH v3 0/3] integrity: NULL pointer dereference fixes

Hi,

Recently Jan Kara reported about possible NULL pointer dereference in IMA and EVM setxattr hooks. This patchset fixes the problem.

http://sourceforge.net/p/linux-ima/mailman/message/32957578

In this version of the patchset we agreed with Mimi to split IMA patch into two, where the first patch fixes the oops and must go to the stable and the second patch limits setting of file hash to fix and log modes and may go to the next kernel version via normal process.

- Dmitry

Dmitry Kasatkin (3):
ima: check xattr value length and type in the ima_inode_setxattr()
ima: limit file hash setting by user to fix and log modes
evm: check xattr value length and type in evm_inode_setxattr()

 security/integrity/evm/evm_main.c     | 11 ++++++++---
 security/integrity/ima/ima_appraise.c | 10 ++++++++--
 security/integrity/integrity.h        |  1 +
 3 files changed, 17 insertions(+), 5 deletions(-)
Signature · 1 line
1.9.1