Pull audit updates from Paul Moore: "Four audit patches for v5.17: - Harden the code through additional use of the struct_size() macro and zero-length arrays to flexible-array conversions. - Ensure that processes which generate userspace audit records are not exempt from the kernel's audit throttling when the audit queues are being overrun" * tag 'audit-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit: audit: replace zero-length array with flexible-array member audit: use struct_size() helper in audit_[send|make]_reply() audit: ensure userspace is penalized the same as the kernel when under pressure audit: use struct_size() helper in kmalloc()
Showing the changes to include/uapi/linux (1 of 4 files). Show all
Unified · Split
| @@ -514,7 +514,7 @@ struct audit_rule_data { · 513 unmodified lines | |||
| 514 | __u32 values[AUDIT_MAX_FIELDS]; | 514 | __u32 values[AUDIT_MAX_FIELDS]; |
| 515 | __u32 fieldflags[AUDIT_MAX_FIELDS]; | 515 | __u32 fieldflags[AUDIT_MAX_FIELDS]; |
| 516 | __u32 buflen; /* total length of string fields */ | 516 | __u32 buflen; /* total length of string fields */ |
| 517 | char buf[0]; /* string fields buffer */ | 517 | char buf[]; /* string fields buffer */ |
| 518 | }; | 518 | }; |
| 519 | 519 | ||
| 520 | #endif /* _UAPI_LINUX_AUDIT_H_ */ | 520 | #endif /* _UAPI_LINUX_AUDIT_H_ */ |