Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Gaosheng Cui 0c3e6288da capabilities: fix potential memleak on error path from vfs_getxattr_alloc() ... commit 8cf0a1bc12870d148ae830a4ba88cfdf0e879cee upstream. In cap_inode_getsecurity(), we will use vfs_getxattr_alloc() to complete the memory allocation of tmpbuf, if we have completed the memory allocation of tmpbuf, but failed to call handler->get(...), there will be a memleak in below logic: |-- ret = (int)vfs_getxattr_alloc(mnt_userns, ...) | /* ^^^ alloc for tmpbuf */ |-- value = krealloc(*xattr_value, error + 1, flags) | /* ^^^ alloc memory */ |-- error = handler->get(handler, ...) | /* error! */ |-- *xattr_value = value | /* xattr_value is &tmpbuf (memory leak!) */ So we will try to free(tmpbuf) after vfs_getxattr_alloc() fails to fix it. Cc: stable@vger.kernel.org Fixes: 8db6c34f1d ("Introduce v3 namespaced file capabilities") Signed-off-by: Gaosheng Cui <cuigaosheng1@huawei.com> Acked-by: Serge Hallyn <serge@hallyn.com> [PM: subject line and backtrace tweaks] Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-11-10 17:57:55 +01:00
..
apparmor	apparmor: Fix memleak in aa_simple_write_to_buffer()	2022-08-25 11:18:21 +02:00
integrity	efi: Correct Macmini DMI match in uefi cert quirk	2022-10-15 07:54:39 +02:00
keys
loadpin
lockdown	lockdown: also lock down previous kgdb use	2022-06-06 08:33:48 +02:00
safesetid
selinux	selinux: Add boundary check in put_entry()	2022-08-25 11:17:32 +02:00
smack	Fix incorrect type in assignment of ipv6 port for audit	2022-04-15 14:18:22 +02:00
tomoyo	TOMOYO: fix __setup handlers return values	2022-04-15 14:18:13 +02:00
yama
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 17:57:55 +01:00
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	LSM: general protection fault in legacy_parse_param	2022-04-15 14:18:21 +02:00