diff options
| author | Navid Emamdoost <navid.emamdoost@gmail.com> | 2019-10-21 17:23:47 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2020-05-22 00:25:51 +0200 |
| commit | c54d481d71c6849e044690d3960aaebc730224cc (patch) | |
| tree | d43fe9636bb5c992caead0e29a7aba02c2b3dbec /fs/cachefiles/Makefile | |
| parent | apparmor: Fix aa_label refcnt leak in policy_update (diff) | |
| download | linux-c54d481d71c6849e044690d3960aaebc730224cc.tar.xz linux-c54d481d71c6849e044690d3960aaebc730224cc.zip | |
apparmor: Fix use-after-free in aa_audit_rule_init
In the implementation of aa_audit_rule_init(), when aa_label_parse()
fails the allocated memory for rule is released using
aa_audit_rule_free(). But after this release, the return statement
tries to access the label field of the rule which results in
use-after-free. Before releasing the rule, copy errNo and return it
after release.
Fixes: 52e8c38001d8 ("apparmor: Fix memory leak of rule on error exit path")
Signed-off-by: Navid Emamdoost <navid.emamdoost@gmail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'fs/cachefiles/Makefile')
0 files changed, 0 insertions, 0 deletions