smackfs: restrict bytes count in smk_set_cipso()
authorTetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Mon, 12 Apr 2021 13:45:50 +0000 (22:45 +0900)
committerCasey Schaufler <casey@schaufler-ca.com>
Mon, 10 May 2021 20:55:08 +0000 (13:55 -0700)
commit49ec114a6e62d8d320037ce71c1aaf9650b3cafd
tree9026cbc37cf4c0c23f100109ef9c3fc574a30467
parent2e08fb550a2d1017052685a27691911a633c1771
smackfs: restrict bytes count in smk_set_cipso()

Oops, I failed to update subject line.

From 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001
From: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Date: Mon, 12 Apr 2021 22:25:06 +0900
Subject: [PATCH] smackfs: restrict bytes count in smk_set_cipso()

Commit 7ef4c19d245f3dc2 ("smackfs: restrict bytes count in smackfs write
functions") missed that count > SMK_CIPSOMAX check applies to only
format == SMK_FIXED24_FMT case.

Reported-by: syzbot <syzbot+77c53db50c9fff774e8e@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smackfs.c