[PATCH 6.6.y 1/2] AppArmor: Allow apparmor to handle unaligned dfa tables

[sashiko-bot at kernel.org]

> From: Helge Deller <deller at kernel.org>
> 
> [ Upstream commit 64802f731214a51dfe3c6c27636b3ddafd003eb0 ]
> 
> The dfa tables can originate from kernel or userspace and 8-byte alignment
> isn't always guaranteed and as such may trigger unaligned memory accesses
> on various architectures. Resulting in the following
> 
> [   73.901376] WARNING: CPU: 0 PID: 341 at security/apparmor/match.c:316 aa_dfa_unpack+0x6cc/0x720
> [   74.015867] Modules linked in: binfmt_misc evdev flash sg drm drm_panel_orientation_quirks backlight i2c_core configfs nfnetlink autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid sr_mod hid cdrom
> sd_mod ata_generic ohci_pci ehci_pci ehci_hcd ohci_hcd pata_ali libata sym53c8xx scsi_transport_spi tg3 scsi_mod usbcore libphy scsi_common mdio_bus usb_common
> [   74.428977] CPU: 0 UID: 0 PID: 341 Comm: apparmor_parser Not tainted 6.18.0-rc6+ #9 NONE
> [   74.536543] Call Trace:
> [   74.568561] [<0000000000434c24>] dump_stack+0x8/0x18
> [   74.633757] [<0000000000476438>] __warn+0xd8/0x100
> [ ... ]
> Closes: https://github.com/sparclinux/issues/issues/30
> Signed-off-by: Helge Deller <deller at gmx.de>
> Signed-off-by: John Johansen <john.johansen at canonical.com>
> Assisted-by: LLM
> Signed-off-by: Artem Dinaburg <artem at trailofbits.com>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261007204226.47033-1-artem@trailofbits.com?part=1