Commit 9d03a721 authored by Dmitry Kasatkin's avatar Dmitry Kasatkin Committed by Mimi Zohar

integrity: add validity checks for 'path' parameter

This patch adds validity checks for 'path' parameter and
makes it const.
Signed-off-by: default avatarDmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
parent f2b3dee4
...@@ -85,7 +85,7 @@ int __init integrity_init_keyring(const unsigned int id) ...@@ -85,7 +85,7 @@ int __init integrity_init_keyring(const unsigned int id)
return err; return err;
} }
int __init integrity_load_x509(const unsigned int id, char *path) int __init integrity_load_x509(const unsigned int id, const char *path)
{ {
key_ref_t key; key_ref_t key;
char *data; char *data;
......
...@@ -213,6 +213,9 @@ int __init integrity_read_file(const char *path, char **data) ...@@ -213,6 +213,9 @@ int __init integrity_read_file(const char *path, char **data)
char *buf; char *buf;
int rc = -EINVAL; int rc = -EINVAL;
if (!path || !*path)
return -EINVAL;
file = filp_open(path, O_RDONLY, 0); file = filp_open(path, O_RDONLY, 0);
if (IS_ERR(file)) { if (IS_ERR(file)) {
rc = PTR_ERR(file); rc = PTR_ERR(file);
......
...@@ -135,7 +135,7 @@ int integrity_digsig_verify(const unsigned int id, const char *sig, int siglen, ...@@ -135,7 +135,7 @@ int integrity_digsig_verify(const unsigned int id, const char *sig, int siglen,
const char *digest, int digestlen); const char *digest, int digestlen);
int __init integrity_init_keyring(const unsigned int id); int __init integrity_init_keyring(const unsigned int id);
int __init integrity_load_x509(const unsigned int id, char *path); int __init integrity_load_x509(const unsigned int id, const char *path);
#else #else
static inline int integrity_digsig_verify(const unsigned int id, static inline int integrity_digsig_verify(const unsigned int id,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment