linux/security/selinux
Stephen Smalley 86c8db86af selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
We should count the terminating NUL byte as part of the ctx_len.
Otherwise, UBSAN logs a warning:
  UBSAN: array-index-out-of-bounds in security/selinux/xfrm.c:99:14
  index 60 is out of range for type 'char [*]'

The allocation itself is correct so there is no actual out of bounds
indexing, just a warning.

Cc: stable@vger.kernel.org
Suggested-by: Christian Göttsche <cgzones@googlemail.com>
Link: https://lore.kernel.org/selinux/CAEjxPJ6tA5+LxsGfOJokzdPeRomBHjKLBVR6zbrg+_w3ZZbM3A@mail.gmail.com/
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2025-06-16 19:02:22 -04:00
..
include Networking changes for 6.16. 2025-05-28 15:24:36 -07:00
ss selinux: remove a duplicated include 2025-04-12 11:31:46 -04:00
.gitignore selinux: move genheaders to security/selinux/ 2024-10-03 16:07:51 -04:00
avc.c selinux: fix spelling error 2025-02-03 16:47:20 -05:00
genheaders.c selinux: move genheaders to security/selinux/ 2024-10-03 16:07:51 -04:00
hooks.c Networking changes for 6.16. 2025-05-28 15:24:36 -07:00
ibpkey.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
ima.c selinux: adjust typos in comments 2023-05-08 16:44:01 -04:00
Kconfig selinux: improve debug configuration 2023-09-13 13:46:57 -04:00
Makefile selinux: add generated av_permissions.h to targets 2024-12-11 13:42:35 -05:00
netif.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
netlabel.c lsm/stable-6.12 PR 20240911 2024-09-16 18:19:47 +02:00
netlink.c selinux: mark some global variables __ro_after_init 2021-01-12 10:08:55 -05:00
netnode.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
netport.c selinux: drop copy-paste comment 2025-04-11 16:32:07 -04:00
nlmsgtab.c net: Retire DCCP socket. 2025-04-11 18:58:10 -07:00
selinuxfs.c Use try_lookup_noperm() instead of d_hash_and_lookup() outside of VFS 2025-04-08 11:24:41 +02:00
status.c selinux: avoid implicit conversions regarding enforcing status 2023-07-18 18:29:50 -04:00
xfrm.c selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len 2025-06-16 19:02:22 -04:00