Commit 379d9af3 authored by Zhen Lei's avatar Zhen Lei Committed by Paul Moore
Browse files

selinux: fix potential counting error in avc_add_xperms_decision() 



The count increases only when a node is successfully added to
the linked list.

Cc: stable@vger.kernel.org
Fixes: fa1aa143 ("selinux: extended permissions for ioctls")
Signed-off-by: default avatarZhen Lei <thunder.leizhen@huawei.com>
Acked-by: default avatarStephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 8400291e

security/selinux/avc.c

+1 −1
Original line number Diff line number Diff line
@@ -330,12 +330,12 @@ static int avc_add_xperms_decision(struct avc_node *node, 
{

	struct avc_xperms_decision_node *dest_xpd;



	node->ae.xp_node->xp.len++;

	dest_xpd = avc_xperms_decision_alloc(src->used);

	if (!dest_xpd)

		return -ENOMEM;

	avc_copy_xperms_decision(&dest_xpd->xpd, src);

	list_add(&dest_xpd->xpd_list, &node->ae.xp_node->xpd_head);

	node->ae.xp_node->xp.len++;

	return 0;

}