]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
selinux: detect invalid ebitmap
authorWilliam Roberts <william.c.roberts@intel.com>
Tue, 23 Aug 2016 20:49:23 +0000 (13:49 -0700)
committerPaul Moore <paul@paul-moore.com>
Mon, 29 Aug 2016 23:19:50 +0000 (19:19 -0400)
commit74d977b65e45bc9b536b429e7f3b5e3a8e459026
treeabec3a6c025f9b043f50d96ac632e279d2a1e8de
parent348a0db9e69e4c214bf5d7677f17cb99cdc47db0
selinux: detect invalid ebitmap

When count is 0 and the highbit is not zero, the ebitmap is not
valid and the internal node is not allocated. This causes issues
when routines, like mls_context_isvalid() attempt to use the
ebitmap_for_each_bit() and ebitmap_node_get_bit() as they assume
a highbit > 0 will have a node allocated.

Signed-off-by: William Roberts <william.c.roberts@intel.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/ebitmap.c