On Wed, Jul 08, 2020 at 11:17:27PM -0700, Kees Cook wrote: > +static long seccomp_notify_addfd(struct seccomp_filter *filter, > + struct seccomp_notif_addfd __user *uaddfd, > + unsigned int size) > +{ > + struct seccomp_notif_addfd addfd; > + struct seccomp_knotif *knotif; > + struct seccomp_kaddfd kaddfd; > + int ret; > + > + BUILD_BUG_ON(sizeof(struct seccomp_notify_addfd) < SECCOMP_NOTIFY_ADDFD_SIZE_VER0); > + BUILD_BUG_ON(sizeof(struct seccomp_notify_addfd) != SECCOMP_NOTIFY_ADDFD_SIZE_LATEST); *brown paper bag* I built the wrong tree! This is a typo: seccomp_notify_addfd should be seccomp_notif_addfd (no "y"). -- Kees Cook