diff options
| author |   John Johansen <john.johansen@canonical.com> | 2016-03-17 12:02:54 -0700 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2016-07-12 08:43:10 -0700 |
| commit | 23ca7b640b4a55f8747301b6bd984dd05545f6a7 (patch) | |
| tree | f089a9cb4019cee951b6a6e2d5004013ed43e47a /security | |
| parent | apparmor: ensure the target profile name is always audited (diff) | |
| download | linux-dev-23ca7b640b4a55f8747301b6bd984dd05545f6a7.tar.xz linux-dev-23ca7b640b4a55f8747301b6bd984dd05545f6a7.zip | |
apparmor: check that xindex is in trans_table bounds
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/apparmor/policy_unpack.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/apparmor/policy_unpack.c b/security/apparmor/policy_unpack.c index a55fb2f170c9..951ae4633979 100644 --- a/security/apparmor/policy_unpack.c +++ b/security/apparmor/policy_unpack.c @@ -676,7 +676,7 @@ static bool verify_xindex(int xindex, int table_size) int index, xtype; xtype = xindex & AA_X_TYPE_MASK; index = xindex & AA_X_INDEX_MASK; - if (xtype == AA_X_TABLE && index > table_size) + if (xtype == AA_X_TABLE && index >= table_size) return 0; return 1; } |