apparmor/binutils
Ryan Lee 322a98c8c9 Fix incorrect strnlen length in aa_load.c load_policy_dir
POSIX states that d_name has up to NAME_MAX (255) characters, and glibc
stores d_name as an array of size NAME_MAX+1 (256). Thus, supplying
PATH_MAX (4096) as the max length could trigger a buffer overrun. This
could be an even bigger issue on other libcs, as POSIX states that d_name
can be unsized.

Fortunately, this does not seem to cause actual issues, as the length is
only used to compare d_name to a short fixed string. However, it'd be better
to pass the actual correct max length to strnlen.

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
2024-08-06 13:04:17 -07:00
..
po treewide: spelling/typo fixes in code strings 2020-12-01 12:47:18 -08:00
aa-enabled.pod Fix typos 2020-10-25 11:54:56 +00:00
aa-exec.pod docs: update documentation to point bug reporting to gitlab 2020-05-05 00:10:53 -07:00
aa-features-abi.pod Fix typos 2020-10-25 11:54:56 +00:00
aa-status.pod aa-status: update man page with filter information 2023-05-03 01:22:33 -07:00
aa_enabled.c Fix typos 2020-10-25 11:54:56 +00:00
aa_exec.c Error out on conflicting aa-exec parameters 2020-05-21 17:04:40 +02:00
aa_features_abi.c binutils/aa-features-abi: fix failure to close fd due to shadowed var decl 2021-09-27 13:07:11 -07:00
aa_load.c Fix incorrect strnlen length in aa_load.c load_policy_dir 2024-08-06 13:04:17 -07:00
aa_status.c binutils: fix aa-status filters short help message 2024-02-21 09:58:16 -03:00
cJSON.c aa-status: add json pretty printing using cJSON 2020-05-07 01:12:28 -07:00
cJSON.h aa-status: add json pretty printing using cJSON 2020-05-07 01:12:28 -07:00
Makefile binutils: add aa-load 2021-07-26 20:52:34 -03:00