Merge tag 'armsoc-dt64' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

[mirror_ubuntu-artful-kernel.git] / security / integrity / evm / evm_main.c

diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c
index ba8615576d4da93fb3185edfd57e7ebb7ede123b..e2ed498c0f5f59e12a36219b4886b1ea8323e368 100644 (file)
--- a/security/integrity/evm/evm_main.c
+++ b/security/integrity/evm/evm_main.c
@@ -145,6 +145,10 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry,
        /* check value type */
        switch (xattr_data->type) {
        case EVM_XATTR_HMAC:
+               if (xattr_len != sizeof(struct evm_ima_xattr_data)) {
+                       evm_status = INTEGRITY_FAIL;
+                       goto out;
+               }
                rc = evm_calc_hmac(dentry, xattr_name, xattr_value,
                                   xattr_value_len, calc.digest);
                if (rc)