Re: [PATCH 5.10.y] ima: fix out-of-bounds read in xattr_verify()

> The digest-length check in xattr_verify() mixes int and size_t:
>
> 	if (xattr_len - sizeof(xattr_value->type) - hash_start >=
> 			iint->ima_hash->length)
>
> sizeof() yields size_t, so the usual arithmetic conversions promote
> the whole left-hand side to unsigned 64-bit before the subtraction
> runs.

Queued for 5.10, thanks.

-- 
Thanks,
Sasha