evm: clean verification status

When allocating from slab, initialization is done the first time in init_once() and subsequently on free. Because evm_status was not re-initialized on free, evm_verify_hmac() skipped verifications. This patch re-initializes evm_status. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>

evm: clean verification status
When allocating from slab, initialization is done the first time in init_once() and subsequently on free. Because evm_status was not re-initialized on free, evm_verify_hmac() skipped verifications. This patch re-initializes evm_status. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Dmitry Kasatkin · Mimi Zohar
1 parent 566be59ab8
Showing 1 changed file with 1 additions and 0 deletions Side-by-side Diff
security/integrity/iint.c
@@ -74,6 +74,7 @@
 {
 	iint->version = 0;
 	iint->flags = 0UL;
+	iint->evm_status = INTEGRITY_UNKNOWN;
 	kmem_cache_free(iint_cache, iint);
 }
...	...	@@ -74,6 +74,7 @@
74	74	{
75	75	iint->version = 0;
76	76	iint->flags = 0UL;
	77	+ iint->evm_status = INTEGRITY_UNKNOWN;
77	78	kmem_cache_free(iint_cache, iint);
78	79	}
79	80