diff options
| author | John Johansen <john.johansen@canonical.com> | 2016-03-17 22:02:54 +0300 |
|---|---|---|
| committer | Jiri Slaby <jslaby@suse.cz> | 2017-01-27 13:16:11 +0300 |
| commit | c49d78b41c7c1cf1b5fed3be2fa0c0eefd884c82 (patch) | |
| tree | 40fa78a53abed8b37a19b3f7158b96bad67df071 /security | |
| parent | 15021f311c6d79534c5e6630f72e743306185632 (diff) | |
| download | linux-c49d78b41c7c1cf1b5fed3be2fa0c0eefd884c82.tar.xz | |
apparmor: check that xindex is in trans_table bounds
commit 23ca7b640b4a55f8747301b6bd984dd05545f6a7 upstream.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
Diffstat (limited to 'security')
| -rw-r--r-- | security/apparmor/policy_unpack.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/apparmor/policy_unpack.c b/security/apparmor/policy_unpack.c index a689f10930b5..c841b1268a84 100644 --- a/security/apparmor/policy_unpack.c +++ b/security/apparmor/policy_unpack.c @@ -676,7 +676,7 @@ static bool verify_xindex(int xindex, int table_size) int index, xtype; xtype = xindex & AA_X_TYPE_MASK; index = xindex & AA_X_INDEX_MASK; - if (xtype == AA_X_TABLE && index > table_size) + if (xtype == AA_X_TABLE && index >= table_size) return 0; return 1; } |