tree 4fb0eb956481a9155e1cd9fffcd04083d3dfc601
parent 79be093500791cc25cc31bcaec5a4db62e21497b
author Roman Kubiak <r.kubiak@samsung.com> 1450355075 +0100
committer Casey Schaufler <casey@schaufler-ca.com> 1450376516 -0800

Smack: type confusion in smak sendmsg() handler

Smack security handler for sendmsg() syscall
is vulnerable to type confusion issue what
can allow to privilege escalation into root
or cause denial of service.

A malicious attacker can create socket of one
type for example AF_UNIX and pass is into
sendmsg() function ensuring that this is
AF_INET socket.

Remedy
Do not trust user supplied data.
Proposed fix below.

Signed-off-by: Roman Kubiak <r.kubiak@samsung.com>
Signed-off-by: Mateusz Fruba <m.fruba@samsung.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>