]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
netlabel: fix export of SELinux categories > 127
authorJoshua Roys <joshua.roys@gtri.gatech.edu>
Wed, 24 Feb 2010 23:52:44 +0000 (18:52 -0500)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 15 Mar 2010 16:05:47 +0000 (09:05 -0700)
commita0fac0acdd368e8450cda2c75b4a8d86f1151ad4
tree83e2e2b69b7ed5e2c89d477904e69464e1cb13bf
parenta858b15b88214c7bf918eac57d5debbdd60fffa8
netlabel: fix export of SELinux categories > 127

commit c36f74e67fa12202dbcb4ad92c5ac844f9d36b98 upstream.

This fixes corrupted CIPSO packets when SELinux categories greater than 127
are used.  The bug occured on the second (and later) loops through the
while; the inner for loop through the ebitmap->maps array used the same
index as the NetLabel catmap->bitmap array, even though the NetLabel bitmap
is twice as long as the SELinux bitmap.

Signed-off-by: Joshua Roys <joshua.roys@gtri.gatech.edu>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
security/selinux/ss/ebitmap.c