Roberto Sassu d0f7036b12 ima: Don't ignore errors from crypto_shash_update() ... commit 60386b8540 upstream. Errors returned by crypto_shash_update() are not checked in ima_calc_boot_aggregate_tfm() and thus can be overwritten at the next iteration of the loop. This patch adds a check after calling crypto_shash_update() and returns immediately if the result is not zero. Cc: stable@vger.kernel.org Fixes: 3323eec921 ("integrity: IMA as an integrity service provider") Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-10-29 09:07:00 +01:00
..
apparmor	apparmor: don't try to replace stale label in ptraceme check	2020-06-30 15:37:57 -04:00
integrity	ima: Don't ignore errors from crypto_shash_update()	2020-10-29 09:07:00 +01:00
keys	mm: add kvfree_sensitive() for freeing sensitive data objects	2020-06-20 10:24:59 +02:00
loadpin	security: mark LSM hooks as __ro_after_init	2017-03-06 11:00:15 +11:00
selinux	selinux: sel_avc_get_stat_idx should increase position index	2020-10-01 13:12:33 +02:00
smack	Smack: prevent underflow in smk_set_cipso()	2020-08-21 09:48:11 +02:00
tomoyo	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
yama	Yama: Check for pid death before checking ancestry	2019-01-23 08:09:48 +01:00
commoncap.c	exec: Always set cap_ambient in cap_bprm_set_creds	2020-06-03 08:18:01 +02:00
device_cgroup.c	device_cgroup: fix RCU imbalance in error case	2019-04-27 09:35:40 +02:00
inode.c	securityfs: fix use-after-free on symlink traversal	2019-05-25 18:25:34 +02:00
Kconfig	/dev/mem: Add bounce buffer for copy-out	2018-03-24 11:01:24 +01:00
lsm_audit.c	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-19 13:13:24 +01:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c	LSM: Check for NULL cred-security on free	2019-01-23 08:09:50 +01:00