Message ID | 20200629194118.1537330-2-mfo@canonical.com |
---|---|
State | New |
Headers | show |
Series | Fix apparmor reference leak via AF_ALG | expand |
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
diff --git a/security/apparmor/lsm.c b/security/apparmor/lsm.c index 9b943733cf6d..f0f5a0068220 100644 --- a/security/apparmor/lsm.c +++ b/security/apparmor/lsm.c @@ -764,7 +764,12 @@ static void apparmor_sk_clone_security(const struct sock *sk, struct aa_sk_ctx *ctx = aa_sock(sk); struct aa_sk_ctx *new = aa_sock(newsk); + if (new->label) + aa_put_label(new->label); new->label = aa_get_label(ctx->label); + + if (new->peer) + aa_put_label(new->peer); new->peer = aa_get_label(ctx->peer); new->path = ctx->path; path_get(&new->path);