Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Stephen Smalley a21966e594 selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len ... commit 86c8db86af43f52f682e53a0f2f0828683be1e52 upstream. We should count the terminating NUL byte as part of the ctx_len. Otherwise, UBSAN logs a warning: UBSAN: array-index-out-of-bounds in security/selinux/xfrm.c:99:14 index 60 is out of range for type 'char [*]' The allocation itself is correct so there is no actual out of bounds indexing, just a warning. Cc: stable@vger.kernel.org Suggested-by: Christian Göttsche <cgzones@googlemail.com> Link: https://lore.kernel.org/selinux/CAEjxPJ6tA5+LxsGfOJokzdPeRomBHjKLBVR6zbrg+_w3ZZbM3A@mail.gmail.com/ Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-06-27 11:02:56 +01:00
..
apparmor	apparmor: fix 'Do simple duplicate message elimination'	2024-12-14 19:44:34 +01:00
integrity	ima: Fix use-after-free on a dentry's dname.name	2025-03-13 12:43:19 +01:00
keys	security/keys: fix slab-out-of-bounds in key_task_permission	2024-11-17 14:58:50 +01:00
loadpin
lockdown
safesetid
selinux	selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len	2025-06-27 11:02:56 +01:00
smack	smack: recognize ipv4 CIPSO w/o categories	2025-06-04 14:32:33 +02:00
tomoyo	tomoyo: don't emit warning in tomoyo_write_control()	2025-03-13 12:43:03 +01:00
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig	proc: add config & param to block forcing mem writes	2024-11-08 16:20:38 +01:00
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	lsm: new security_file_ioctl_compat() hook	2024-02-23 08:25:15 +01:00