Dan Carpenter 36a4a50f3a Smack: prevent underflow in smk_set_cipso() ...

[ Upstream commit 42a2df3e82 ]

We have an upper bound on "maplevel" but forgot to check for negative
values.

Fixes: e114e47377 ("Smack: Simplified Mandatory Access Control Kernel")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-16 08:46:52 +09:00

..

apparmor

apparmor: enforce nullbyte at end of tag string

2023-05-15 13:54:44 +09:00

integrity

evm: Fix possible memory leak in evm_calc_hmac_or_hash()

2023-05-15 17:34:13 +09:00

keys

KEYS: reaching the keys quotas correctly

2023-05-15 17:14:21 +09:00

loadpin

LSM: LoadPin: provide enablement CONFIG

2016-05-17 20:10:30 +10:00

selinux

selinux: fix double free

2023-05-16 08:20:22 +09:00

smack

Smack: prevent underflow in smk_set_cipso()

2023-05-16 08:46:52 +09:00

tomoyo

mm: replace get_user_pages_remote() write/force parameters with gup_flags

2016-10-19 08:12:02 -07:00

yama

Yama: Check for pid death before checking ancestry

2023-05-15 11:01:25 +09:00

commoncap.c

exec: Always set cap_ambient in cap_bprm_set_creds

2023-05-15 17:30:15 +09:00

device_cgroup.c

device_cgroup: fix RCU imbalance in error case

2023-05-15 12:28:07 +09:00

inode.c

ANDROID: vfs: Add permission2 for filesystems with per mount permissions

2017-01-31 10:47:22 -08:00

Kconfig

Merge 4.9.75 into android-4.9

2018-01-05 22:28:25 +01:00

lsm_audit.c

missing barriers in some of unix_sock ->addr and ->path accesses

2023-05-15 11:55:26 +09:00

Makefile

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

LSM: Check for NULL cred-security on free

2023-05-15 11:01:36 +09:00