Eric Biggers 18026d8668 KEYS: reject NULL restriction string when type is specified ... keyctl_restrict_keyring() allows through a NULL restriction when the "type" is non-NULL, which causes a NULL pointer dereference in asymmetric_lookup_restriction() when it calls strcmp() on the restriction string. But no key types actually use a "NULL restriction" to mean anything, so update keyctl_restrict_keyring() to reject it with EINVAL. Reported-by: syzbot <syzkaller@googlegroups.com> Fixes: 97d3aa0f31 ("KEYS: Add a lookup_restriction function for the asymmetric key type") Cc: <stable@vger.kernel.org> # v4.12+ Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: David Howells <dhowells@redhat.com>		2017-12-08 15:13:29 +00:00
..
apparmor	bug fixes:	2017-11-30 18:56:41 -05:00
integrity	ima: do not update security.ima if appraisal status is not INTEGRITY_PASS	2017-11-20 08:23:10 +11:00
keys	KEYS: reject NULL restriction string when type is specified	2017-12-08 15:13:29 +00:00
loadpin
selinux	selinux/stable-4.15 PR 20171113	2017-11-15 13:32:56 -08:00
smack	Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2017-11-13 10:30:44 -08:00
tomoyo	Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2017-11-13 10:30:44 -08:00
yama
commoncap.c	Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2017-11-13 10:30:44 -08:00
device_cgroup.c	device_cgroup: prepare code for bpf-based device controller	2017-11-05 23:26:51 +09:00
inode.c
Kconfig
lsm_audit.c
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c