diff options
| author | Maxime Bélair <maxime.belair@canonical.com> | 2026-08-19 14:19:44 +0100 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2026-10-29 08:28:03 -0700 |
| commit | f7bd6285ffeb425793334f6d48ccb5035cab2fa7 (patch) | |
| tree | 80d2c0aecb9967aff2a9b845006a3ce20854033e /scripts | |
| parent | 1f5428b9f9bfb9dab6828015a5254dcd7c582a01 (diff) | |
| download | linux-f7bd6285ffeb425793334f6d48ccb5035cab2fa7.tar.gz linux-f7bd6285ffeb425793334f6d48ccb5035cab2fa7.zip | |
apparmor: fix a leak on a rejected string table entry
unpack_strs_table() stores each entry into the table only after
validating it, so an entry the validation rejects is never freed. Up
to 64KB leaks per rejected entry.
Store the pointer before validating it.
Fixes: c140dcd1246b ("apparmor: make str table more generic and be able to have multiple entries")
Reviewed-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: Maxime Bélair <maxime.belair@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions