safesetid: check size of policy writes
authorLeo Stone <leocstone@gmail.com>
Tue, 17 Dec 2024 18:26:57 +0000 (10:26 -0800)
committerPaul Moore <paul@paul-moore.com>
Sun, 5 Jan 2025 03:46:09 +0000 (22:46 -0500)
commitf09ff307c7299392f1c88f763299e24bc99811c7
treef2537747b01669ab9d13330d09661488e3d81c91
parent3b44cd0998678b55a0df20b514bca0e298f4ff48
safesetid: check size of policy writes

syzbot attempts to write a buffer with a large size to a sysfs entry
with writes handled by handle_policy_update(), triggering a warning
in kmalloc.

Check the size specified for write buffers before allocating.

Reported-by: syzbot+4eb7a741b3216020043a@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=4eb7a741b3216020043a
Signed-off-by: Leo Stone <leocstone@gmail.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/safesetid/securityfs.c