]> git.itanic.dy.fi Git - linux-stable/commit
reiserfs: Initialize sec->length in reiserfs_security_init().
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Thu, 11 May 2023 14:48:45 +0000 (23:48 +0900)
committerPaul Moore <paul@paul-moore.com>
Thu, 25 May 2023 21:44:44 +0000 (17:44 -0400)
commitd031f4e8b493df299123fbb4ec13db870584ed28
treedffdfff9b85bf5606388d2e440b27c3b13a5bb74
parenta495108ea99c64ce6b5727cb163162ba28e27bff
reiserfs: Initialize sec->length in reiserfs_security_init().

syzbot is reporting that sec->length is not initialized.

Since security_inode_init_security() returns 0 when initxattrs is provided
but call_int_hook(inode_init_security) returned -EOPNOTSUPP, control will
reach to "if (sec->length && ...) {" without initializing sec->length.

Reported-by: syzbot <syzbot+00a3779539a23cbee38c@syzkaller.appspotmail.com>
Closes: https://syzkaller.appspot.com/bug?extid=00a3779539a23cbee38c
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fixes: 52ca4b6435a4 ("reiserfs: Switch to security_inode_init_security()")
Signed-off-by: Paul Moore <paul@paul-moore.com>
fs/reiserfs/xattr_security.c