selinux: check sidtab limit before adding a new entry
We need to error out when trying to add an entry above SIDTAB_MAX in sidtab_reverse_lookup() to avoid overflow on the odd chance that this happens. Cc: stable@vger.kernel.org Fixes: ee1a84fd ("selinux: overhaul sidtab to fix bug and improve performance") Signed-off-by:Ondrej Mosnacek <omosnace@redhat.com> Reviewed-by:
Kees Cook <keescook@chromium.org> Signed-off-by:
Paul Moore <paul@paul-moore.com>
parent
ea74a685
Please register or sign in to comment