Roberto Sassu 60386b8540 ima: Don't ignore errors from crypto_shash_update() ... Errors returned by crypto_shash_update() are not checked in ima_calc_boot_aggregate_tfm() and thus can be overwritten at the next iteration of the loop. This patch adds a check after calling crypto_shash_update() and returns immediately if the result is not zero. Cc: stable@vger.kernel.org Fixes: 3323eec921 ("integrity: IMA as an integrity service provider") Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2020-09-15 13:47:37 -04:00
..
evm	integrity: invalid kernel parameters feedback	2020-09-08 22:03:50 -04:00
ima	ima: Don't ignore errors from crypto_shash_update()	2020-09-15 13:47:37 -04:00
platform_certs	EFI updates for v5.7:	2020-02-26 15:21:22 +01:00
digsig_asymmetric.c	integrity: include keyring name for unknown key request	2020-09-09 20:05:28 -04:00
digsig.c	integrity: Remove duplicate pr_fmt definitions	2020-02-28 14:32:58 -05:00
iint.c	integrity/ima: switch to using __kernel_read	2020-07-08 08:27:57 +02:00
integrity_audit.c	integrity: Use current_uid() in integrity_audit_message()	2020-08-31 17:46:50 -04:00
integrity.h	integrity: Add errno field in audit message	2020-07-16 21:48:11 -04:00
Kconfig	powerpc: Load firmware trusted keys/hashes into kernel keyring	2019-11-13 00:33:23 +11:00
Makefile	powerpc: Load firmware trusted keys/hashes into kernel keyring	2019-11-13 00:33:23 +11:00