aboutsummaryrefslogtreecommitdiff
path: root/ipc
diff options
context:
space:
mode:
authorPaul Moore <pmoore@redhat.com>2013-05-17 09:08:50 +0000
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2013-06-27 11:27:31 -0700
commit7718fa70e21fa0a0ee1a6ae3bc6fd1494cd238f3 (patch)
tree1373ea6d885802d0618e3907de0e7a74105b5c0b /ipc
parent32d704a1a1d8c0fc6552c269a911a03621065cd9 (diff)
netlabel: improve domain mapping validation
[ Upstream commit 6b21e1b77d1a3d58ebfd513264c885695e8a0ba5 ] The net/netlabel/netlabel_domainhash.c:netlbl_domhsh_add() function does not properly validate new domain hash entries resulting in potential problems when an administrator attempts to add an invalid entry. One such problem, as reported by Vlad Halilov, is a kernel BUG (found in netlabel_domainhash.c:netlbl_domhsh_audit_add()) when adding an IPv6 outbound mapping with a CIPSO configuration. This patch corrects this problem by adding the necessary validation code to netlbl_domhsh_add() via the newly created netlbl_domhsh_validate() function. Ideally this patch should also be pushed to the currently active -stable trees. Reported-by: Vlad Halilov <vlad.halilov@gmail.com> Signed-off-by: Paul Moore <pmoore@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'ipc')
0 files changed, 0 insertions, 0 deletions