freebsd-skq/sys/security/mac
markj a41798f2a9 Require that MAC label buffers be able to store a non-empty string.
The buffer size may be used to initialize an sbuf in
MAC_POLICY_EXTERNALIZE, and without this constraint it's possible to
trigger an assertion failure in the sbuf code.  With INVARIANTS
disabled, the first attempt to write to the sbuf will fail.

Reported by:	pho
Reviewed by:	delphij
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D16527
2018-08-01 03:46:07 +00:00
..
mac_audit.c
mac_cred.c
mac_framework.c Require that MAC label buffers be able to store a non-empty string. 2018-08-01 03:46:07 +00:00
mac_framework.h
mac_inet6.c
mac_inet.c
mac_internal.h
mac_label.c
mac_net.c Use an accessor function to access ifr_data. 2018-03-30 18:50:13 +00:00
mac_pipe.c
mac_policy.h
mac_posix_sem.c
mac_posix_shm.c
mac_priv.c
mac_process.c
mac_socket.c
mac_syscalls.c Reduce duplication in __mac_*_(file|link)(2) implementation. 2018-02-15 18:57:22 +00:00
mac_system.c
mac_sysv_msg.c
mac_sysv_sem.c
mac_sysv_shm.c
mac_vfs.c