diff options
| author | Dmitry Kasatkin <d.kasatkin@samsung.com> | 2013-04-25 07:44:04 (GMT) |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2013-10-25 21:17:00 (GMT) |
| commit | a35c3fb6490cc1d3446e4781693408100113c4fb (patch) | |
| tree | 03234f8b7ebaf3cb98bf77f999b8a5284d4dadbc /security/integrity/iint.c | |
| parent | b1aaab22e263d0cca1effe319b7d2bf895444219 (diff) | |
| download | linux-a35c3fb6490cc1d3446e4781693408100113c4fb.tar.xz | |
ima: use dynamically allocated hash storage
For each inode in the IMA policy, an iint is allocated. To support
larger hash digests, the iint digest size changed from 20 bytes to
the maximum supported hash digest size. Instead of allocating the
maximum size, which most likely is not needed, this patch dynamically
allocates the needed hash storage.
Changelog:
- fix krealloc bug
Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/iint.c')
| -rw-r--r-- | security/integrity/iint.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/security/integrity/iint.c b/security/integrity/iint.c index 74522db..c49d3f1 100644 --- a/security/integrity/iint.c +++ b/security/integrity/iint.c @@ -70,6 +70,8 @@ struct integrity_iint_cache *integrity_iint_find(struct inode *inode) static void iint_free(struct integrity_iint_cache *iint) { + kfree(iint->ima_hash); + iint->ima_hash = NULL; iint->version = 0; iint->flags = 0UL; iint->ima_file_status = INTEGRITY_UNKNOWN; |