8c9be42172
The length of the policy buffer is not validated before accessing it,
which means that multiple out-of-bounds memory accesses can occur.
This is especially bad since userspace can load policy binaries over
debugfs.
Compile-tested only.
Fixes:
|
||
---|---|---|
.. | ||
chrome | ||
goldfish | ||
loongarch | ||
mellanox | ||
mips | ||
olpc | ||
surface | ||
x86 | ||
Kconfig | ||
Makefile |