auditsc: audit_krule mask accesses need bounds checking
authorAndy Lutomirski <luto@amacapital.net>
Thu, 29 May 2014 03:09:58 +0000 (23:09 -0400)
committerJiri Slaby <jslaby@suse.cz>
Fri, 20 Jun 2014 15:34:17 +0000 (17:34 +0200)
commit6004b0e5ac2e8e9e1bb0f012dc9242e03cca95df
tree2b577ac3607de3f58cae19281afff870db9981f4
parentbf8af413dcf4591bcc8f823133c4a2355c189458
auditsc: audit_krule mask accesses need bounds checking

commit a3c54931199565930d6d84f4c3456f6440aefd41 upstream.

Fixes an easy DoS and possible information disclosure.

This does nothing about the broken state of x32 auditing.

eparis: If the admin has enabled auditd and has specifically loaded
audit rules.  This bug has been around since before git.  Wow...

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
kernel/auditsc.c