auditsc: audit_krule mask accesses need bounds checking
authorAndy Lutomirski <luto@amacapital.net>
Thu, 29 May 2014 03:09:58 +0000 (23:09 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 16 Jun 2014 20:40:33 +0000 (13:40 -0700)
commit732eafc78bba8e18a51c169f3dc7f33cddcdc401
treeb8fc8f71bb8146ed3f0df07b2647800dc099636b
parent670ffb50413f386f92e59511c60b679f46e5cace
auditsc: audit_krule mask accesses need bounds checking

commit a3c54931199565930d6d84f4c3456f6440aefd41 upstream.

Fixes an easy DoS and possible information disclosure.

This does nothing about the broken state of x32 auditing.

eparis: If the admin has enabled auditd and has specifically loaded
audit rules.  This bug has been around since before git.  Wow...

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/auditsc.c