linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-01-15 17:43:59 +00:00

History

Eric Dumazet 212cd08953 selinux: fix random read in selinux_ip_postroute_compat()

In commit e446f9dfe17b ("net: synack packets can be attached to request
sockets"), I missed one remaining case of invalid skb->sk->sk_security
access.

Dmitry Vyukov got a KASan report pointing to it.

Add selinux_skb_sk() helper that is responsible to get back to the
listener if skb is attached to a request socket, instead of
duplicating the logic.

Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead of listener")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: Paul Moore <paul@paul-moore.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2015-11-05 16:45:51 -05:00

apparmor

Minor merge needed, due to function move.

2015-07-01 10:49:25 -07:00

integrity

Minor merge needed, due to function move.

2015-07-01 10:49:25 -07:00

keys

KEYS: Don't permit request_key() to construct a new keyring

2015-10-19 11:24:51 +01:00

selinux

selinux: fix random read in selinux_ip_postroute_compat()