freebsd-nq

History

Mark Johnston 6324de037c Require that MAC label buffers be able to store a non-empty string.

The buffer size may be used to initialize an sbuf in
MAC_POLICY_EXTERNALIZE, and without this constraint it's possible to
trigger an assertion failure in the sbuf code.  With INVARIANTS
disabled, the first attempt to write to the sbuf will fail.

Reported by:	pho
Reviewed by:	delphij
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D16527

2018-08-01 03:46:07 +00:00

audit

fix incorrect operator in the AUDITPIPE_SET_QLIMIT bounds check

2018-07-23 16:56:49 +00:00

mac

Require that MAC label buffers be able to store a non-empty string.

2018-08-01 03:46:07 +00:00

mac_biba

…

mac_bsdextended

Correct bitwise test in mac_bsdextended ugidfw_rule_valid()

2017-06-13 01:17:58 +00:00