summaryrefslogtreecommitdiff
path: root/acinclude.m4
AgeCommit message (Expand)AuthorFilesLines
2009-05-24New upstream release 15.7a, fixing CVE-2009-014815.7a-1Tobias Klauser1-0/+230
norews' onchange='this.form.submit();'>mode:
authorSeth Forshee <seth.forshee@canonical.com>2016-08-01 08:19:10 -0500
committerMimi Zohar <zohar@linux.vnet.ibm.com>2016-11-13 22:50:11 -0500
commitb4bfec7f4a86424b114f94f41c4e1841ec102df3 (patch)
tree9f4a668c3d28ef3de0743d3dda285829b38a85a3 /security
parent5465d02a4970990d8ec692c7539af5fdde95e613 (diff)
security/integrity: Harden against malformed xattrs
In general the handling of IMA/EVM xattrs is good, but I found a few locations where either the xattr size or the value of the type field in the xattr are not checked. Add a few simple checks to these locations to prevent malformed or malicious xattrs from causing problems. Signed-off-by: Seth Forshee <seth.forshee@canonical.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security')