Roberto Sassu 6e322a9e42 evm: check hash algorithm passed to init_desc() ...

commit 221be106d7 upstream.

This patch prevents memory access beyond the evm_tfm array by checking the
validity of the index (hash algorithm) passed to init_desc(). The hash
algorithm can be arbitrarily set if the security.ima xattr type is not
EVM_XATTR_HMAC.

Fixes: 5feeb61183 ("evm: Allow non-SHA1 digital signatures")
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Cc: stable@vger.kernel.org
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-06-09 09:17:21 +02:00

..

evm

evm: check hash algorithm passed to init_desc()

2019-06-09 09:17:21 +02:00

ima

ima: show rules with IMA_INMASK correctly

2019-06-09 09:17:21 +02:00

digsig_asymmetric.c

integrity: prevent deadlock during digsig verification.

2018-07-18 07:27:22 -04:00

digsig.c

integrity/security: fix digsig.c build error with header file

2018-02-22 20:09:08 -08:00

iint.c

integrity: silence warning when CONFIG_SECURITYFS is not enabled

2018-07-18 07:27:22 -04:00

integrity_audit.c

ima: Use audit_log_format() rather than audit_log_string()

2018-07-18 07:27:22 -04:00

integrity.h

ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set

2018-07-18 07:27:22 -04:00

Kconfig

security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA

2016-04-12 19:54:58 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00