mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-11 12:28:41 +08:00
eead1c2ea2
The cipso and calipso code can set the MLS_CAT attribute on successful parsing, even if the corresponding catmap has not been allocated, as per current configuration and external input. Later, selinux code tries to access the catmap if the MLS_CAT flag is present via netlbl_catmap_getlong(). That may cause null ptr dereference while processing incoming network traffic. Address the issue setting the MLS_CAT flag only if the catmap is really allocated. Additionally let netlbl_catmap_getlong() cope with NULL catmap. Reported-by: Matthew Sheets <matthew.sheets@gd-ms.com> Fixes: |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
netlabel_addrlist.c | ||
netlabel_addrlist.h | ||
netlabel_calipso.c | ||
netlabel_calipso.h | ||
netlabel_cipso_v4.c | ||
netlabel_cipso_v4.h | ||
netlabel_domainhash.c | ||
netlabel_domainhash.h | ||
netlabel_kapi.c | ||
netlabel_mgmt.c | ||
netlabel_mgmt.h | ||
netlabel_unlabeled.c | ||
netlabel_unlabeled.h | ||
netlabel_user.c | ||
netlabel_user.h |