apparmor: Check buffer bounds when mapping permissions mask
authorTyler Hicks <tyhicks@canonical.com>
Fri, 6 Jul 2018 05:25:00 +0000 (05:25 +0000)
committerJohn Johansen <john.johansen@canonical.com>
Thu, 19 Jul 2018 23:24:43 +0000 (16:24 -0700)
commit7f3ebcf2b1395e0248e56146041e1e5625fd2f23
tree51d693e57cc5734aee692b1cebab08acd1aab511
parentfb7d1bcf1602b46f37ada72178516c01a250e434
apparmor: Check buffer bounds when mapping permissions mask

Don't read past the end of the buffer containing permissions
characters or write past the end of the destination string.

Detected by CoverityScan CID#1415361, 1415376 ("Out-of-bounds access")

Fixes: e53cfe6c7caa ("apparmor: rework perm mapping to a slightly broader set")
Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/file.c
security/apparmor/include/perms.h
security/apparmor/lib.c