[RFC PATCH 2/3] fixup! audit: remove arch_f pointer from struct audit_krule

Richard Guy Briggs rgb at redhat.com
Mon Feb 12 12:29:40 UTC 2018


Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
---
 kernel/auditfilter.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
index 3343d1c..48dcb59 100644
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
@@ -221,11 +221,13 @@ static inline int audit_match_class_bits(int class, u32 *mask)
 static int audit_match_signal(struct audit_entry *entry)
 {
 	int i;
+	u32 archval;
 	struct audit_field *arch;
 
 	for (i = 0; i < entry->rule.field_count; i++)
 		if (entry->rule.fields[i].type == AUDIT_ARCH) {
 			arch = &entry->rule.fields[i];
+			archval = arch->val;
 			break;
 		}
 
@@ -238,7 +240,7 @@ static int audit_match_signal(struct audit_entry *entry)
 					       entry->rule.mask));
 	}
 
-	switch(audit_classify_arch(arch->val)) {
+	switch(audit_classify_arch(archval)) {
 	case 0: /* native */
 		return (audit_match_class_bits(AUDIT_CLASS_SIGNAL,
 					       entry->rule.mask));
-- 
1.8.3.1




More information about the Linux-audit mailing list