Roberto Sassu 4e8581eefe ima: pass filename to ima_rdwr_violation_check() ... ima_rdwr_violation_check() retrieves the full path of a measured file by calling ima_d_path(). If process_measurement() calls this function, it reuses the pointer and passes it to the functions to measure/appraise/audit an accessed file. After commit bc15ed663e ("ima: fix ima_d_path() possible race with rename"), ima_d_path() first tries to retrieve the full path by calling d_absolute_path() and, if there is an error, copies the dentry name to the buffer passed as argument. However, ima_rdwr_violation_check() passes to ima_d_path() the pointer of a local variable. process_measurement() might be reusing the pointer to an area in the stack which may have been already overwritten after ima_rdwr_violation_check() returned. Correct this issue by passing to ima_rdwr_violation_check() the pointer of a buffer declared in process_measurement(). Fixes: bc15ed663e ("ima: fix ima_d_path() possible race with rename") Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2017-12-18 09:43:48 -05:00
..
Kconfig	IMA: Correct Kconfig dependencies for hash selection	2017-06-21 14:37:12 -04:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
ima.h	ima: Simplify policy_func_show.	2017-06-21 14:37:12 -04:00
ima_api.c	ima: support new "hash" and "dont_hash" policy actions	2017-12-18 09:43:38 -05:00
ima_appraise.c	ima: support new "hash" and "dont_hash" policy actions	2017-12-18 09:43:38 -05:00
ima_crypto.c	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2017-11-14 10:52:09 -08:00
ima_fs.c	ima: Fix bool initialization/comparison	2017-11-08 15:16:36 -05:00
ima_init.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima_kexec.c	ima: define a canonical binary_runtime_measurements list format	2016-12-20 09:48:45 -08:00
ima_main.c	ima: pass filename to ima_rdwr_violation_check()	2017-12-18 09:43:48 -05:00
ima_mok.c	KEYS: Use structure to capture key restriction function and data	2017-04-04 14:10:10 -07:00
ima_policy.c	ima: support new "hash" and "dont_hash" policy actions	2017-12-18 09:43:38 -05:00
ima_queue.c	ima: fix get_binary_runtime_size()	2017-06-21 14:37:12 -04:00
ima_template.c	ima: Fix line continuation format	2017-12-18 09:43:47 -05:00
ima_template_lib.c	ima: introduce ima_parse_buf()	2017-06-21 14:37:12 -04:00
ima_template_lib.h	ima: introduce ima_parse_buf()	2017-06-21 14:37:12 -04:00