diff options
| author | John Johansen <john.johansen@canonical.com> | 2020-03-31 08:37:54 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2020-04-08 13:42:48 +0200 |
| commit | c27c6bd2c4d6b6bb779f9b722d5607993e1d5e5c (patch) | |
| tree | b7554ab191015fca33af785fc7affbf33fae7f91 /security/apparmor/apparmorfs.c | |
| parent | apparmor: remove duplicate check of xattrs on profile attachment. (diff) | |
| download | linux-c27c6bd2c4d6b6bb779f9b722d5607993e1d5e5c.tar.xz linux-c27c6bd2c4d6b6bb779f9b722d5607993e1d5e5c.zip | |
apparmor: ensure that dfa state tables have entries
Currently it is possible to specify a state machine table with 0 length,
this is not valid as optional tables are specified by not defining
the table as present. Further this allows by-passing the base tables
range check against the next/check tables.
Fixes: d901d6a298dc ("apparmor: dfa split verification of table headers")
Reported-by: Mike Salvatore <mike.salvatore@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/apparmorfs.c')
0 files changed, 0 insertions, 0 deletions