selinux: Add boundary check in put_entry()

jira VULN-70689
cve CVE-2022-50200
commit-author Xiu Jianfeng <[email protected]>
commit 15ec76f

Just like next_entry(), boundary check is necessary to prevent memory
out-of-bound access.

	Signed-off-by: Xiu Jianfeng <[email protected]>
	Signed-off-by: Paul Moore <[email protected]>
(cherry picked from commit 15ec76f)
	Signed-off-by: Brett Mastbergen <[email protected]>

Author: bmastbergen

security/selinux/ss/policydb.h

@@ -370,6 +370,8 @@ static inline int put_entry(const void *buf, size_t bytes, int num, struct polic
 {
 	size_t len = bytes * num;
 
+	if (len > fp->len)
+		return -EINVAL;
 	memcpy(fp->data, buf, len);
 	fp->data += len;
 	fp->len -= len;