Zygmunt Krynicki fea23bf73f apparmor: aa_getprocattr free procattr leak on format failure ...

aa_getprocattr() allocates the output string before rendering the label
into it. If the second aa_label_snxprint() call fails, the function
returned without freeing that allocation.

Free and clear the output pointer on the uncommon formatting failure path
before dropping the namespace reference.

Fixes: 76a1d263ab ("apparmor: switch getprocattr to using label_print fns()")
Reviewed-by: Tyler Hicks <code@thicks.com>
Reviewed-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-06-13 20:18:30 -07:00

..

include

apparmor: remove or add symlinks to rawdata according to export_binary

2026-06-13 20:14:07 -07:00

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

.kunitconfig

apparmor: add .kunitconfig

2026-02-01 12:01:19 -08:00

af_unix.c

apparmor: fix refcount leak when updating the sk_ctx

2026-06-13 20:14:06 -07:00

apparmorfs.c

apparmor: Fix return in ns_mkdir_op

2026-06-13 20:14:07 -07:00

audit.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

capability.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

crypto.c

apparmor: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

domain.c

apparmor: change fn_label_build() call to not return NULL

2026-06-13 20:14:07 -07:00

file.c

apparmor: fix fast path cache check for unix sockets

2026-01-29 01:27:54 -08:00

ipc.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

Kconfig

Revert "apparmor: use SHA-256 library API instead of crypto_shash API"

2025-07-15 22:39:22 -07:00

label.c

apparmor: use __label_make_stale in __aa_proxy_redirect

2026-06-13 20:14:06 -07:00

lib.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

lsm.c

apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine

2026-04-22 20:11:08 -07:00

Makefile

apparmor: make all generated string array headers const char *const

2025-05-25 20:15:01 -07:00

match.c

apparmor: propagate -ENOMEM correctly in unpack_table

2026-06-13 20:14:06 -07:00

mount.c

apparmor: change fn_label_build() call to not return NULL

2026-06-13 20:14:07 -07:00

net.c

apparmor: fix NULL sock in aa_sock_file_perm

2026-01-22 04:51:55 -08:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Fix string overrun due to missing termination

2026-04-22 20:09:05 -07:00

policy_compat.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy_ns.c

apparmor: fix: limit the number of levels of policy namespaces

2026-03-09 16:05:43 -07:00

policy_unpack_test.c

Merge tag 'apparmor-pr-2025-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2025-08-04 08:17:28 -07:00

policy_unpack.c

apparmor: fail policy unpack on accept2 allocation failure

2026-06-13 20:14:08 -07:00

policy.c

apparmor: remove or add symlinks to rawdata according to export_binary

2026-06-13 20:14:07 -07:00

procattr.c

apparmor: aa_getprocattr free procattr leak on format failure

2026-06-13 20:18:30 -07:00

resource.c

apparmor: fix rlimit for posix cpu timers

2026-01-29 01:27:54 -08:00

secid.c

lsm: secctx provider check on release

2024-12-04 14:59:57 -05:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

apparmor: remove unnecessary goto and associated label

2026-06-13 20:18:17 -07:00