Commit 15ec76fb authored by Xiu Jianfeng's avatar Xiu Jianfeng Committed by Paul Moore
Browse files

selinux: Add boundary check in put_entry() 



Just like next_entry(), boundary check is necessary to prevent memory
out-of-bound access.

Signed-off-by: default avatarXiu Jianfeng <xiujianfeng@huawei.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 73de1bef

security/selinux/ss/policydb.h

+2 −0
Original line number Diff line number Diff line
@@ -370,6 +370,8 @@ static inline int put_entry(const void *buf, size_t bytes, int num, struct polic 
{

	size_t len = bytes * num;



	if (len > fp->len)

		return -EINVAL;

	memcpy(fp->data, buf, len);

	fp->data += len;

	fp->len -= len;