linux

mirror of https://github.com/hardkernel/linux.git synced 2026-04-01 18:53:02 +09:00

Files

Roberto Sassu 7a6080d23d evm: Check also if *tfm is an error pointer in init_desc()

[ Upstream commit 53de3b080d ]

This patch avoids a kernel panic due to accessing an error pointer set by
crypto_alloc_shash(). It occurs especially when there are many files that
require an unsupported algorithm, as it would increase the likelihood of
the following race condition:

Task A: *tfm = crypto_alloc_shash() <= error pointer
Task B: if (*tfm == NULL) <= *tfm is not NULL, use it
Task B: rc = crypto_shash_init(desc) <= panic
Task A: *tfm = NULL

This patch uses the IS_ERR_OR_NULL macro to determine whether or not a new
crypto context must be created.

Cc: stable@vger.kernel.org
Fixes: d46eb36995 ("evm: crypto hash replaced by shash")
Co-developed-by: Krzysztof Struczynski <krzysztof.struczynski@huawei.com>
Signed-off-by: Krzysztof Struczynski <krzysztof.struczynski@huawei.com>
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-15 17:28:30 +09:00

apparmor

apparmor: enforce nullbyte at end of tag string

2023-05-15 13:54:44 +09:00

integrity

evm: Check also if *tfm is an error pointer in init_desc()

2023-05-15 17:28:30 +09:00

keys

KEYS: reaching the keys quotas correctly

2023-05-15 17:14:21 +09:00

loadpin

LSM: LoadPin: provide enablement CONFIG