You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David Jeffery d0709f1e66 Don't leak a key reference if request_key() tries to use a revoked keyring ... If a request_key() call to allocate and fill out a key attempts to insert the key structure into a revoked keyring, the key will leak, using memory and part of the user's key quota until the system reboots. This is from a failure of construct_alloc_key() to decrement the key's reference count after the attempt to insert into the requested keyring is rejected. key_put() needs to be called in the link_prealloc_failed callpath to ensure the unused key is released. Signed-off-by: David Jeffery <djeffery@redhat.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: James Morris <james.l.morris@oracle.com>		10 years ago
..
encrypted-keys	KEYS: Fix stale key registration at error path	10 years ago
Kconfig	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	10 years ago
Makefile	KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches	12 years ago
big_key.c	KEYS: Remove key_type::match in favour of overriding default by match_preparse	11 years ago
compat.c	security/compat: convert to COMPAT_SYSCALL_DEFINE	11 years ago
gc.c	KEYS: close race between key lookup and freeing	10 years ago
internal.h	KEYS: request_key() should reget expired keys rather than give EKEYEXPIRED	10 years ago
key.c	KEYS: remove a bogus NULL check	10 years ago
keyctl.c	KEYS: Fix the size of the key description passed to/from userspace	10 years ago
keyring.c	KEYS: request_key() should reget expired keys rather than give EKEYEXPIRED	10 years ago
permission.c	KEYS: Move the flags representing required permission to linux/key.h	11 years ago
persistent.c	KEYS: Move the flags representing required permission to linux/key.h	11 years ago
proc.c	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	10 years ago
process_keys.c	KEYS: Make the key matching functions return bool	11 years ago
request_key.c	Don't leak a key reference if request_key() tries to use a revoked keyring	10 years ago
request_key_auth.c	KEYS: Simplify KEYRING_SEARCH_{NO,DO}_STATE_CHECK flags	10 years ago
sysctl.c	security: Convert use of typedef ctl_table to struct ctl_table	11 years ago
trusted.c	KEYS: Remove key_type::match in favour of overriding default by match_preparse	11 years ago
trusted.h	…
user_defined.c	KEYS: Remove key_type::match in favour of overriding default by match_preparse	11 years ago