diff options
| author | Alan Cox <alan@linux.intel.com> | 2012-07-26 23:47:11 +0200 |
|---|---|---|
| committer | James Morris <james.l.morris@oracle.com> | 2012-07-30 07:04:17 +0200 |
| commit | 3b9fc37280c521b086943f9aedda767f5bf3b2d3 (patch) | |
| tree | c76cc02753da4df5d11e516d8e9373e5f0426b24 /security/device_cgroup.c | |
| parent | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net (diff) | |
| download | linux-3b9fc37280c521b086943f9aedda767f5bf3b2d3.tar.xz linux-3b9fc37280c521b086943f9aedda767f5bf3b2d3.zip | |
smack: off by one error
Consider the input case of a rule that consists entirely of non space
symbols followed by a \0. Say 64 + \0
In this case strlen(data) = 64
kzalloc of subject and object are 64 byte objects
sscanfdata, "%s %s %s", subject, ...)
will put 65 bytes into subject.
Signed-off-by: Alan Cox <alan@linux.intel.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Cc: stable@vger.kernel.org
Signed-off-by: James Morris <james.l.morris@oracle.com>
Diffstat (limited to 'security/device_cgroup.c')
0 files changed, 0 insertions, 0 deletions