Smack: prevent underflow in smk_set_cipso()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 23 Jul 2020 15:23:05 +0000 (18:23 +0300)
committerCasey Schaufler <casey@schaufler-ca.com>
Mon, 27 Jul 2020 20:35:12 +0000 (13:35 -0700)
commit42a2df3e829f3c5562090391b33714b2e2e5ad4a
tree673418527d96c2f8fc17db77214bd477b4cc0e92
parenta6bd4f6d9b07452b0b19842044a6c3ea384b0b88
Smack: prevent underflow in smk_set_cipso()

We have an upper bound on "maplevel" but forgot to check for negative
values.

Fixes: e114e473771c ("Smack: Simplified Mandatory Access Control Kernel")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smackfs.c