[apparmor] [PATCH] apparmor: aa_getprocattr free procattr leak on format failure

Tyler Hicks code at tyhicks.com
Mon May 4 16:24:36 UTC 2026


On 2026-05-04 18:17:05, Zygmunt Krynicki wrote:
> 
> 
> W dniu 4.05.2026 o 18:13 Tyler Hicks pisze:
> 
> >>  				FLAG_HIDDEN_UNCONFINED);
> >>  	if (len < 0) {
> >> +		kfree(*string);
> >> +		*string = NULL;
> >
> > Upstream doesn't have this call to kfree(). Did you create this patch
> > from an Ubuntu kernel tree?
> 
> The kfree is coming from my patch.
> 
> I think those are all against recent (at most weekend away) upstream master.

Yes, I totally misread the trivial patch. My bad!

John, please feel free to add:

Fixes: 76a1d263aba3 ("apparmor: switch getprocattr to using label_print fns()")
Reviewed-by: Tyler Hicks <code at thicks.com>

Tyler

> 
> Best regards
> ZK



More information about the AppArmor mailing list