diff options
| author | Christian Göttsche <cgzones@googlemail.com> | 2026-09-03 13:35:34 +0200 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2026-09-24 17:30:18 -0400 |
| commit | 0037abbab6fb9cb18539b9ee2b59d9c3056d3bee (patch) | |
| tree | 0b37d15178713e0a3e879c0e474e623936467122 /include/linux/timerqueue.h | |
| parent | 641bd5750517d2e5c128c566669c190857260693 (diff) | |
| download | linux-next-0037abbab6fb9cb18539b9ee2b59d9c3056d3bee.tar.gz linux-next-0037abbab6fb9cb18539b9ee2b59d9c3056d3bee.zip | |
selinux: bounds-check filename transition source types at load
filename_trans_read_helper() validates the target type, target class and
each datum's otype, but the per-datum stypes ebitmap is read without any
bound on its set bits.
Reject a stypes bitmap whose highest set bit is not a defined type.
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions