Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #80386

Bug#1038945: linux: kernel null pointer dereference loading an invalid AppArmor profile, regression since 6.1

From Simon McVittie <smcv@debian.org>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#1038945: linux: kernel null pointer dereference loading an invalid AppArmor profile, regression since 6.1
Date 2023-09-11 12:30 +0200
Message-ID <HcMl4-8f2Y-7@gated-at.bofh.it> (permalink)
References <GJQ77-lIM-5@gated-at.bofh.it> <HbP1D-7Dns-1@gated-at.bofh.it> <GJQ77-lIM-5@gated-at.bofh.it> <HbP1D-7Dns-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


Control: found -1 6.4.13-1
Control: found -1 6.5.1-1~exp1

On Fri, 08 Sep 2023 at 20:58:26 +0200, Diederik de Haas wrote:
> On Friday, 23 June 2023 16:36:37 CEST Simon McVittie wrote:
> > Source: linux
> > Version: 6.3.7-1
> 
> Can you test whether the bug is still present in 6.4.13?
> Testing with 6.5.1 from Experimental may be useful too.

The bug is still present in both versions.

This should be straightforward for anyone interested in this bug to
reproduce without my help, you don't need any special packages installed
(the invalid profile was originally from the quake4 package, but the bug
can easily be reproduced without quake4). Steps:

- Have a real or virtual machine with apparmor (I used a qemu VM in
  virt-manager, running an image produced by autopkgtest-build-qemu)
- Download
  https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=1038945;filename=bad.txt;msg=5
  and copy it onto the test machine
- Run as root: "apparmor_parser -Tr /path/to/bad.txt"
- Expected result: successfully loaded or gracefully rejected (either one
  would be OK)
- Actual result: a null pointer dereference similar to my initial report

    smcv

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1038945: linux: kernel null pointer dereference loading an invalid AppArmor profile, regression since 6.1 Simon McVittie <smcv@debian.org> - 2023-06-23 16:40 +0200
  Bug#1038945: linux: kernel null pointer dereference loading an invalid AppArmor profile, regression since 6.1 Diederik de Haas <didi.debian@cknow.org> - 2023-09-08 21:10 +0200
    Bug#1038945: linux: kernel null pointer dereference loading an invalid AppArmor profile, regression since 6.1 Simon McVittie <smcv@debian.org> - 2023-09-11 12:30 +0200
  Processed: Re: Bug#1038945: linux: kernel null pointer  dereference loading an invalid AppArmor profile, regression since 6.1 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2023-09-11 12:30 +0200

csiph-web