| commit | 4e78c724d47e2342aa8fde61f6b8536f662f795f | [log] [tgz] |
|---|---|---|
| author | Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | Mon Jun 13 13:49:11 2011 +0900 |
| committer | James Morris <jmorris@namei.org> | Tue Jun 14 15:18:42 2011 +1000 |
| tree | 9256c52a1e40b593601647bcc1d8d8e588188f77 | |
| parent | 2c53b436a30867eb6b47dd7bab23ba638d1fb0d2 [diff] |
TOMOYO: Fix oops in tomoyo_mount_acl(). In tomoyo_mount_acl() since 2.6.36, kern_path() was called without checking dev_name != NULL. As a result, an unprivileged user can trigger oops by issuing mount(NULL, "/", "ext3", 0, NULL) request. Fix this by checking dev_name != NULL before calling kern_path(dev_name). Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Cc: stable@kernel.org Signed-off-by: James Morris <jmorris@namei.org>