Mike Salvatore 17111037fd apparmor: reset pos on failure to unpack for various functions ... [ Upstream commit 156e42996b ] Each function that manipulates the aa_ext struct should reset it's "pos" member on failure. This ensures that, on failure, no changes are made to the state of the aa_ext struct. There are paths were elements are optional and the error path is used to indicate the optional element is not present. This means instead of just aborting on error the unpack stream can become unsynchronized on optional elements, if using one of the affected functions. Cc: stable@vger.kernel.org Fixes: 736ec752d9 ("AppArmor: policy routines for loading and unpacking policy") Signed-off-by: Mike Salvatore <mike.salvatore@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-09-16 08:22:16 +02:00
..
apparmor	apparmor: reset pos on failure to unpack for various functions	2019-09-16 08:22:16 +02:00
integrity	evm: check hash algorithm passed to init_desc()	2019-06-09 09:17:21 +02:00
keys	keys: Fix dependency loop between construction record and auth key	2019-03-23 20:09:48 +01:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	selinux: fix memory leak in policydb_init()	2019-08-06 19:06:54 +02:00
smack	smack: fix access permissions for keyring	2019-02-12 19:47:05 +01:00
tomoyo	Kbuild updates for v4.19	2018-08-15 12:09:03 -07:00
yama	Yama: Check for pid death before checking ancestry	2019-01-22 21:40:32 +01:00
commoncap.c	cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()	2018-08-11 02:05:53 -05:00
device_cgroup.c	device_cgroup: fix RCU imbalance in error case	2019-04-27 09:36:40 +02:00
inode.c	securityfs: fix use-after-free on symlink traversal	2019-05-25 18:23:42 +02:00
Kconfig	Revert "x86/mm/legacy: Populate the user page-table with user pgd's"	2018-09-14 17:08:45 +02:00
lsm_audit.c	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-19 13:12:41 +01:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c	LSM: Check for NULL cred-security on free	2019-01-22 21:40:35 +01:00