Dan Carpenter 9b89db24c6 smackfs: Prevent underflow in smk_set_cipso() ... [ Upstream commit 3ad49d37cf5759c3b8b68d02e3563f633d9c1aee ] There is a upper bound to "catlen" but no lower bound to prevent negatives. I don't see that this necessarily causes a problem but we may as well be safe. Fixes: e114e47377 ("Smack: Simplified Mandatory Access Control Kernel") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-09-19 12:20:13 +02:00
..
apparmor	apparmor: fix missing error check for rhashtable_insert_fast	2023-07-27 08:44:10 +02:00
bpf	bpf: Implement bpf_local_storage for inodes	2020-08-25 15:00:04 -07:00
integrity	ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig	2023-09-19 12:20:12 +02:00
keys	security: keys: perform capable check only on privileged operations	2023-09-19 12:20:05 +02:00
loadpin	LoadPin: Ignore the "contents" argument of the LSM hooks	2023-01-14 10:16:22 +01:00
lockdown	Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2020-06-02 17:36:24 -07:00
safesetid	LSM: SafeSetID: Fix warnings reported by test bot	2020-10-13 09:17:36 -07:00
selinux	selinux: set next pointer before attaching to list	2023-08-30 16:23:15 +02:00
smack	smackfs: Prevent underflow in smk_set_cipso()	2023-09-19 12:20:13 +02:00
tomoyo	tomoyo: fix broken dependency on *.conf.default	2023-02-01 08:23:10 +01:00
yama	task_work: cleanup notification modes	2020-10-17 15:05:30 -06:00
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 18:14:26 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-14 10:16:36 +01:00
inode.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
Kconfig	x86/retbleed: Add fine grained Kconfig knobs	2022-07-25 11:26:50 +02:00
Kconfig.hardening	hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero	2022-10-26 13:25:12 +02:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:27:29 +01:00
Makefile	device_cgroup: Cleanup cgroup eBPF device filter code	2020-04-13 14:41:54 -04:00
min_addr.c	sysctl: pass kernel pointers to ->proc_handler	2020-04-27 02:07:40 -04:00
security.c	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	2023-03-11 16:40:00 +01:00