auditsc: audit_krule mask accesses need bounds checking
authorAndy Lutomirski <luto@amacapital.net>
Thu, 29 May 2014 03:09:58 +0000 (23:09 -0400)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 10 Jun 2014 15:44:40 +0000 (08:44 -0700)
commita3c54931199565930d6d84f4c3456f6440aefd41
tree7c2360628766e160a56672eb20c57e69a9881a2d
parent64b2d1fbbfda07765dae3f601862796a61b2c451
auditsc: audit_krule mask accesses need bounds checking

Fixes an easy DoS and possible information disclosure.

This does nothing about the broken state of x32 auditing.

eparis: If the admin has enabled auditd and has specifically loaded
audit rules.  This bug has been around since before git.  Wow...

Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/auditsc.c