mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
0fb25b57e3
Subject: apparmor: Fix use after free in regexp parser There are two cases of use-after-free in the simply_tree_base code. It worked in the past because there aren't any allocations between the free and the use, so it was still around. With glibc's memory perturbing feature (set _MALLOC_PERTURB to anything), the freed memory is poisoned. This causes crashes in e.g. apparmor_parser while parsing certain profiles. This patch addresses it by saving a pointer to the node to free after the node is advanced. Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com> |
||
|---|---|---|
| .. | ||
| libapparmor_re | ||
| pcre | ||
| po | ||
| tst | ||
| apparmor-parser.spec.in | ||
| apparmor.d.pod | ||
| apparmor.pod | ||
| apparmor.vim.pod | ||
| apparmor_parser.pod | ||
| COPYING.GPL | ||
| frob_slack_rc | ||
| immunix.h | ||
| Makefile | ||
| parser.h | ||
| parser_alias.c | ||
| parser_include.c | ||
| parser_include.h | ||
| parser_interface.c | ||
| parser_lex.l | ||
| parser_main.c | ||
| parser_merge.c | ||
| parser_misc.c | ||
| parser_policy.c | ||
| parser_regex.c | ||
| parser_symtab.c | ||
| parser_variable.c | ||
| parser_yacc.y | ||
| rc.aaeventd.redhat | ||
| rc.aaeventd.suse | ||
| rc.apparmor.debian | ||
| rc.apparmor.functions | ||
| rc.apparmor.redhat | ||
| rc.apparmor.slackware | ||
| rc.apparmor.suse | ||
| README | ||
| subdomain.conf | ||
| subdomain.conf.pod | ||
| techdoc.tex | ||
The apparmor_parser allows you to add, replace, and remove AppArmor policy through the use of command line options. The default is to add. `apparmor_parser --help` shows what the command line options are. You can also find more information at <http://forge.novell.com/modules/xfmod/project/?apparmor>. Please send all complaints, bug reports, feature requests, rants about the software, and questions to apparmor-general@forge.novell.com. Security issues should be directed to security@suse.de or secure@novell.com, where we will attempt to conform to the RFP vulnerability disclosure protocol: http://www.wiretrip.net/rfp/policy.html The parser uses the PCRE (Perl Compatible Regular Expression) engine, which was written by Philip Hazel and is copyright by the University of Cambridge, England. For more information on the PCRE engine, see <ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/> Thanks. -- The AppArmor development team