[RFC PATCH] audit: Fix possible return value truncation in audit_get_context()

Alexander Viro aviro at redhat.com
Wed Apr 1 21:19:41 UTC 2009


On Wed, Apr 01, 2009 at 03:47:27PM -0400, Paul Moore wrote:
> The audit subsystem treats syscall return codes as type long, unfortunately
> the audit_get_context() function mistakenly converts the return code to an
> int type in the parameters which could cause problems on systems where the
> sizeof(int) != sizeof(long).
> 
> Signed-off-by: Paul Moore <paul.moore at hp.com>

Applied.  E.g. for mmap() it's actually easy to trigger on 64bit boxen.




More information about the Linux-audit mailing list