Re: [PATCH] apparmor: enforce nullbyte at end of tag string

On 5/28/19 8:32 AM, Jann Horn wrote: > A packed AppArmor policy contains null-terminated tag strings that are read > by unpack_nameX(). However, unpack_nameX() uses string functions on them > without ensuring that they are actually null-terminated, potentially > leading to out-of-bounds accesses.

[PATCH] apparmor: enforce nullbyte at end of tag string

A packed AppArmor policy contains null-terminated tag strings that are read by unpack_nameX(). However, unpack_nameX() uses string functions on them without ensuring that they are actually null-terminated, potentially leading to out-of-bounds accesses. Make sure that the tag string is