Stephen Smalley 210a773703 selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len ... commit 86c8db86af upstream. We should count the terminating NUL byte as part of the ctx_len. Otherwise, UBSAN logs a warning: UBSAN: array-index-out-of-bounds in security/selinux/xfrm.c:99:14 index 60 is out of range for type 'char [*]' The allocation itself is correct so there is no actual out of bounds indexing, just a warning. Cc: stable@vger.kernel.org Suggested-by: Christian Göttsche <cgzones@googlemail.com> Link: https://lore.kernel.org/selinux/CAEjxPJ6tA5+LxsGfOJokzdPeRomBHjKLBVR6zbrg+_w3ZZbM3A@mail.gmail.com/ Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-06-27 11:07:37 +01:00
..
include	ima: Avoid blocking in RCU read-side critical section	2024-07-11 12:47:16 +02:00
ss	selinux: ignore unknown extended permissions	2025-01-09 13:29:56 +01:00
.gitignore
avc.c	selinux: fix potential counting error in avc_add_xperms_decision()	2024-08-29 17:30:15 +02:00
hooks.c	selinux,smack: don't bypass permissions check in inode_setsecctx hook	2024-10-17 15:21:15 +02:00
ibpkey.c
ima.c
Kconfig
Makefile
netif.c
netlabel.c
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c	selinux: improve error checking in sel_write_load()	2024-11-01 01:56:07 +01:00
status.c
xfrm.c	selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len	2025-06-27 11:07:37 +01:00