android_kernel_motorola_sm6375/security/selinux
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Stephen Smalley a21966e594 selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
commit 86c8db86af43f52f682e53a0f2f0828683be1e52 upstream.

We should count the terminating NUL byte as part of the ctx_len.
Otherwise, UBSAN logs a warning:
  UBSAN: array-index-out-of-bounds in security/selinux/xfrm.c:99:14
  index 60 is out of range for type 'char [*]'

The allocation itself is correct so there is no actual out of bounds
indexing, just a warning.

Cc: stable@vger.kernel.org
Suggested-by: Christian Göttsche <cgzones@googlemail.com>
Link: https://lore.kernel.org/selinux/CAEjxPJ6tA5+LxsGfOJokzdPeRomBHjKLBVR6zbrg+_w3ZZbM3A@mail.gmail.com/
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-06-27 11:02:56 +01:00
..
include
ss selinux: ignore unknown extended permissions 2025-01-09 13:23:33 +01:00
.gitignore
avc.c selinux: fix potential counting error in avc_add_xperms_decision() 2024-09-04 13:14:50 +02:00
hooks.c lsm: new security_file_ioctl_compat() hook 2024-02-23 08:25:15 +01:00
ibpkey.c
Kconfig
Makefile selinux: don't use make's grouped targets feature yet 2023-06-09 10:29:02 +02:00
netif.c
netlabel.c
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c selinux: improve error checking in sel_write_load() 2024-11-08 16:20:52 +01:00
xfrm.c selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len 2025-06-27 11:02:56 +01:00