[PATCH] apparmor: Fix an error code in verify_table_headers()

[John Johansen]

On 03/19/2018 02:12 AM, Dan Carpenter wrote:
> We accidentally return a positive EPROTO instead of a negative -EPROTO.
> Since 71 is not an error pointer, that means it eventually results in an
> Oops in the caller.
> 
> Fixes: d901d6a298dc ("apparmor: dfa split verification of table headers")
> Signed-off-by: Dan Carpenter <dan.carpenter at oracle.com>
> 
ouch, and pulled into apparmor-next

Acked-by: John Johansen <john.johansen at canonical.com>

> diff --git a/security/apparmor/match.c b/security/apparmor/match.c
> index dd4c995c5e25..280eba082c7b 100644
> --- a/security/apparmor/match.c
> +++ b/security/apparmor/match.c
> @@ -198,7 +198,7 @@ static int verify_table_headers(struct table_header **tables, int flags)
>  static int verify_dfa(struct aa_dfa *dfa)
>  {
>  	size_t i, state_count, trans_count;
> -	int error = EPROTO;
> +	int error = -EPROTO;
>  
>  	state_count = dfa->tables[YYTD_ID_BASE]->td_lolen;
>  	trans_count = dfa->tables[YYTD_ID_NXT]->td_lolen;
> 

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html