On 03/19/2018 02:12 AM, Dan Carpenter wrote:
> We accidentally return a positive EPROTO instead of a negative -EPROTO.
> Since 71 is not an error pointer, that means it eventually results in an
> Oops in the caller.
>
> Fixes: d901d6a298dc ("apparmor: dfa split verification of table headers")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
>
ouch, and pulled into apparmor-next
Acked-by: John Johansen <john.johansen@xxxxxxxxxxxxx>
> diff --git a/security/apparmor/match.c b/security/apparmor/match.c
> index dd4c995c5e25..280eba082c7b 100644
> --- a/security/apparmor/match.c
> +++ b/security/apparmor/match.c
> @@ -198,7 +198,7 @@ static int verify_table_headers(struct table_header **tables, int flags)
> static int verify_dfa(struct aa_dfa *dfa)
> {
> size_t i, state_count, trans_count;
> - int error = EPROTO;
> + int error = -EPROTO;
>
> state_count = dfa->tables[YYTD_ID_BASE]->td_lolen;
> trans_count = dfa->tables[YYTD_ID_NXT]->td_lolen;
>
--
To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
