OERV-BSP/kernel-spacemit-k1
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
59f742e55a469ef36c5c1533b6095a103b61eda8
kernel-spacemit-k1/security/tomoyo
History
Tetsuo Handa 2caa605079 tomoyo: fix UAF write bug in tomoyo_write_control() 
commit 2f03fc340cac9ea1dc63cbf8c93dd2eb0f227815 upstream.

Since tomoyo_write_control() updates head->write_buf when write()
of long lines is requested, we need to fetch head->write_buf after
head->io_sem is held.  Otherwise, concurrent write() requests can
cause use-after-free-write and double-free problems.

Reported-by: Sam Sun <samsun1006219@gmail.com>
Closes: https://lkml.kernel.org/r/CAEkJfYNDspuGxYx5kym8Lvp--D36CMDUErg4rxfWFJuPbbji8g@mail.gmail.com
Fixes: bd03a3e4c9 ("TOMOYO: Add policy namespace support.")
Cc:  <stable@vger.kernel.org> # Linux 3.1+
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-03-06 14:48:39 +00:00
..
policy
…
.gitignore
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
audit.c
tomoyo: replace tomoyo_round2() with kmalloc_size_roundup()
2023-03-01 23:46:12 +09:00
common.c
tomoyo: fix UAF write bug in tomoyo_write_control()
2024-03-06 14:48:39 +00:00
common.h
tomoyo: remove unused function declaration
2023-08-13 22:07:15 +09:00
condition.c
tomoyo: Fix typo in comments.
2020-12-06 13:44:57 +09:00
domain.c
tomoyo: refactor deprecated strncpy
2023-08-05 19:55:10 +09:00
environ.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
file.c
tomoyo: struct path it might get from LSM callers won't have NULL dentry or mnt
2022-08-21 11:50:42 -04:00
gc.c
tomoyo: Fix typo in comments.
2020-12-06 13:44:57 +09:00
group.c
tomoyo: Suppress RCU warning at list_for_each_entry_rcu().
2019-12-16 23:02:27 +09:00
Kconfig
tomoyo: Update website link
2023-01-13 23:11:38 +09:00
load_policy.c
TOMOYO: fix __setup handlers return values
2022-02-24 07:45:07 +09:00
Makefile
tomoyo: Omit use of bin2c
2023-01-09 21:46:50 +09:00
memory.c
tomoyo: Fix null pointer check
2020-11-27 19:36:11 +09:00
mount.c
tomoyo: Coding style fix.
2019-01-24 14:50:27 -08:00
network.c
tomoyo: don't special case PF_IO_WORKER for PF_KTHREAD
2021-03-28 13:11:29 +09:00
realpath.c
tomoyo: struct path it might get from LSM callers won't have NULL dentry or mnt
2022-08-21 11:50:42 -04:00
securityfs_if.c
tomoyo: fix doc warnings
2021-06-16 00:01:28 +09:00
tomoyo.c
lsm: new security_file_ioctl_compat() hook
2024-01-31 16:18:54 -08:00
util.c
tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
2021-12-15 20:13:55 +09:00