]> www.infradead.org Git - users/dwmw2/linux.git/commit
apparmor: use kvfree_sensitive to free data->data
authorFedor Pchelkin <pchelkin@ispras.ru>
Thu, 1 Feb 2024 14:24:48 +0000 (17:24 +0300)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 10 May 2024 15:32:35 +0000 (08:32 -0700)
commit2bc73505a5cd2a18a7a542022722f136c19e3b87
treefc10914b179c6f2ab2af130e758a51d7d8f0249f
parentfce09ea314505a52f2436397608fa0a5d0934fb1
apparmor: use kvfree_sensitive to free data->data

Inside unpack_profile() data->data is allocated using kvmemdup() so it
should be freed with the corresponding kvfree_sensitive().

Also add missing data->data release for rhashtable insertion failure path
in unpack_profile().

Found by Linux Verification Center (linuxtesting.org).

Fixes: e025be0f26d5 ("apparmor: support querying extended trusted helper extra data")
Cc: stable@vger.kernel.org
Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/policy.c
security/apparmor/policy_unpack.c