Re: [PATCH] ima: fix off-by-one comparison on template name length

2016-09-21 Thread Mimi Zohar
Hi Colin, On Tue, 2016-09-20 at 18:25 +0100, Colin King wrote: > From: Colin Ian King > > The comparison of dr_v1->template_name_len is off-by-one, so > currently if the length is MAX_TEMPLATE_NAME_LEN we end up > with an out-of-bounds write on template_name when the

Re: [PATCH] ima: fix off-by-one comparison on template name length

2016-09-21 Thread Mimi Zohar
Hi Colin, On Tue, 2016-09-20 at 18:25 +0100, Colin King wrote: > From: Colin Ian King > > The comparison of dr_v1->template_name_len is off-by-one, so > currently if the length is MAX_TEMPLATE_NAME_LEN we end up > with an out-of-bounds write on template_name when the terminating > zero