46 		aa_put_label(rcu_dereference_protected(proxy->label, true));  in free_proxy()
48 		RCU_INIT_POINTER(proxy->label, (struct aa_label *)PROXY_POISON);  in free_proxy()
60 struct aa_proxy *aa_alloc_proxy(struct aa_label *label, gfp_t gfp)  in aa_alloc_proxy()  argument
67 		rcu_assign_pointer(new->label, aa_get_label(label));  in aa_alloc_proxy()
81 	tmp = rcu_dereference_protected(orig->proxy->label,  in __aa_proxy_redirect()
83 	rcu_assign_pointer(orig->proxy->label, aa_get_label(new));  in __aa_proxy_redirect()
208 		u |= vec[i]->label.flags & (FLAG_DEBUG1 | FLAG_DEBUG2 |  in accum_vec_flags()
210 		if (!(u & vec[i]->label.flags & FLAG_UNCONFINED))  in accum_vec_flags()
315 void aa_label_destroy(struct aa_label *label)  in aa_label_destroy()  argument
317 	AA_BUG(!label);  in aa_label_destroy()
319 	if (!label_isprofile(label)) {  in aa_label_destroy()
323 		aa_put_str(label->hname);  in aa_label_destroy()
325 		label_for_each(i, label, profile) {  in aa_label_destroy()
327 			label->vec[i.i] = (struct aa_profile *)  in aa_label_destroy()
332 	if (label->proxy) {  in aa_label_destroy()
333 		if (rcu_dereference_protected(label->proxy->label, true) == label)  in aa_label_destroy()
334 			rcu_assign_pointer(label->proxy->label, NULL);  in aa_label_destroy()
335 		aa_put_proxy(label->proxy);  in aa_label_destroy()
337 	aa_free_secid(label->secid);  in aa_label_destroy()
339 	label->proxy = (struct aa_proxy *) PROXY_POISON + 1;  in aa_label_destroy()
342 void aa_label_free(struct aa_label *label)  in aa_label_free()  argument
344 	if (!label)  in aa_label_free()
347 	aa_label_destroy(label);  in aa_label_free()
348 	kfree(label);  in aa_label_free()
351 static void label_free_switch(struct aa_label *label)  in label_free_switch()  argument
353 	if (label->flags & FLAG_NS_COUNT)  in label_free_switch()
354 		aa_free_ns(labels_ns(label));  in label_free_switch()
355 	else if (label_isprofile(label))  in label_free_switch()
356 		aa_free_profile(labels_profile(label));  in label_free_switch()
358 		aa_label_free(label);  in label_free_switch()
363 	struct aa_label *label = container_of(head, struct aa_label, rcu);  in label_free_rcu()  local
365 	if (label->flags & FLAG_IN_TREE)  in label_free_rcu()
366 		(void) aa_label_remove(label);  in label_free_rcu()
367 	label_free_switch(label);  in label_free_rcu()
372 	struct aa_label *label = container_of(kref, struct aa_label, count);  in aa_label_kref()  local
373 	struct aa_ns *ns = labels_ns(label);  in aa_label_kref()
377 		label_free_switch(label);  in aa_label_kref()
381 	AA_BUG(label_isprofile(label) &&  in aa_label_kref()
382 	       on_list_rcu(&label->vec[0]->base.profiles));  in aa_label_kref()
383 	AA_BUG(label_isprofile(label) &&  in aa_label_kref()
384 	       on_list_rcu(&label->vec[0]->base.list));  in aa_label_kref()
387 	call_rcu(&label->rcu, label_free_rcu);  in aa_label_kref()
390 static void label_free_or_put_new(struct aa_label *label, struct aa_label *new)  in label_free_or_put_new()  argument
392 	if (label != new)  in label_free_or_put_new()
399 bool aa_label_init(struct aa_label *label, int size, gfp_t gfp)  in aa_label_init()  argument
401 	AA_BUG(!label);  in aa_label_init()
404 	if (aa_alloc_secid(label, gfp) < 0)  in aa_label_init()
407 	label->size = size;			/* doesn't include null */  in aa_label_init()
408 	label->vec[size] = NULL;		/* null terminate */  in aa_label_init()
409 	kref_init(&label->count);  in aa_label_init()
410 	RB_CLEAR_NODE(&label->node);  in aa_label_init()
477 int aa_label_next_confined(struct aa_label *label, int i)  in aa_label_next_confined()  argument
479 	AA_BUG(!label);  in aa_label_next_confined()
482 	for (; i < label->size; i++) {  in aa_label_next_confined()
483 		if (!profile_unconfined(label->vec[i]))  in aa_label_next_confined()
593 static bool __label_remove(struct aa_label *label, struct aa_label *new)  in __label_remove()  argument
595 	struct aa_labelset *ls = labels_set(label);  in __label_remove()
598 	AA_BUG(!label);  in __label_remove()
602 		__aa_proxy_redirect(label, new);  in __label_remove()
604 	if (!label_is_stale(label))  in __label_remove()
605 		__label_make_stale(label);  in __label_remove()
607 	if (label->flags & FLAG_IN_TREE) {  in __label_remove()
608 		rb_erase(&label->node, &ls->root);  in __label_remove()
609 		label->flags &= ~FLAG_IN_TREE;  in __label_remove()
666 				       struct aa_label *label, bool replace)  in __label_insert()  argument
671 	AA_BUG(!label);  in __label_insert()
672 	AA_BUG(labels_set(label) != ls);  in __label_insert()
674 	AA_BUG(label->flags & FLAG_IN_TREE);  in __label_insert()
680 		int result = label_cmp(label, this);  in __label_insert()
693 				__proxy_share(this, label);  in __label_insert()
694 			AA_BUG(!__label_replace(this, label));  in __label_insert()
695 			return aa_get_label(label);  in __label_insert()
703 	rb_link_node(&label->node, parent, new);  in __label_insert()
704 	rb_insert_color(&label->node, &ls->root);  in __label_insert()
705 	label->flags |= FLAG_IN_TREE;  in __label_insert()
707 	return aa_get_label(label);  in __label_insert()
757 static struct aa_label *__label_find(struct aa_label *label)  in __label_find()  argument
759 	AA_BUG(!label);  in __label_find()
761 	return __vec_find(label->vec, label->size);  in __label_find()
772 bool aa_label_remove(struct aa_label *label)  in aa_label_remove()  argument
774 	struct aa_labelset *ls = labels_set(label);  in aa_label_remove()
781 	res = __label_remove(label, ns_unconfined(labels_ns(label)));  in aa_label_remove()
839 	struct aa_label *label;  in vec_find()  local
848 	label = __vec_find(vec, n);  in vec_find()
851 	return label;  in vec_find()
858 	struct aa_label *label = NULL;  in vec_create_and_insert_label()  local
867 		return aa_get_label(&vec[0]->label);  in vec_create_and_insert_label()
869 	ls = labels_set(&vec[len - 1]->label);  in vec_create_and_insert_label()
882 	label = __label_insert(ls, new, false);  in vec_create_and_insert_label()
884 	label_free_or_put_new(label, new);  in vec_create_and_insert_label()
886 	return label;  in vec_create_and_insert_label()
892 	struct aa_label *label = vec_find(vec, len);  in aa_vec_find_or_create_label()  local
894 	if (label)  in aa_vec_find_or_create_label()
895 		return label;  in aa_vec_find_or_create_label()
910 struct aa_label *aa_label_find(struct aa_label *label)  in aa_label_find()  argument
912 	AA_BUG(!label);  in aa_label_find()
914 	return vec_find(label->vec, label->size);  in aa_label_find()
928 struct aa_label *aa_label_insert(struct aa_labelset *ls, struct aa_label *label)  in aa_label_insert()  argument
934 	AA_BUG(!label);  in aa_label_insert()
937 	if (!label_is_stale(label)) {  in aa_label_insert()
939 		l = __label_find(label);  in aa_label_insert()
946 	l = __label_insert(ls, label, false);  in aa_label_insert()
1053 	struct aa_label *label;  in label_merge_insert()  local
1072 			AA_BUG(!new->vec[k]->label.proxy);  in label_merge_insert()
1073 			AA_BUG(!new->vec[k]->label.proxy->label);  in label_merge_insert()
1074 			if (next->label.proxy != new->vec[k]->label.proxy)  in label_merge_insert()
1090 			label = aa_get_label(&new->vec[0]->label);  in label_merge_insert()
1091 			return label;  in label_merge_insert()
1106 	label = __label_insert(labels_set(new), new, false);  in label_merge_insert()
1109 	return label;  in label_merge_insert()
1185 	struct aa_label *label, *ar = NULL, *br = NULL;  in aa_label_find_merge()  local
1197 	label = __label_find_merge(ls, a, b);  in aa_label_find_merge()
1202 	return label;  in aa_label_find_merge()
1222 	struct aa_label *label = NULL;  in aa_label_merge()  local
1236 	if (!label) {  in aa_label_merge()
1249 		label = label_merge_insert(new, a, b);  in aa_label_merge()
1250 		label_free_or_put_new(label, new);  in aa_label_merge()
1256 	return label;  in aa_label_merge()
1299 				struct aa_label *label,  in label_compound_match()  argument
1307 	label_for_each(i, label, tp) {  in label_compound_match()
1321 	label_for_each_cont(i, label, tp) {  in label_compound_match()
1359 				  struct aa_label *label, aa_state_t start,  in label_components_match()  argument
1369 	label_for_each(i, label, tp) {  in label_components_match()
1385 	label_for_each_cont(i, label, tp) {  in label_components_match()
1419 		   struct aa_label *label, aa_state_t state, bool subns,  in aa_label_match()  argument
1422 	int error = label_compound_match(profile, rules, label, state, subns,  in aa_label_match()
1428 	return label_components_match(profile, rules, label, state, subns,  in aa_label_match()
1444 bool aa_update_label_name(struct aa_ns *ns, struct aa_label *label, gfp_t gfp)  in aa_update_label_name()  argument
1452 	AA_BUG(!label);  in aa_update_label_name()
1454 	if (label->hname || labels_ns(label) != ns)  in aa_update_label_name()
1457 	if (aa_label_acntsxprint(&name, ns, label, FLAGS_NONE, gfp) < 0)  in aa_update_label_name()
1460 	ls = labels_set(label);  in aa_update_label_name()
1462 	if (!label->hname && label->flags & FLAG_IN_TREE) {  in aa_update_label_name()
1463 		label->hname = name;  in aa_update_label_name()
1476 static inline bool use_label_hname(struct aa_ns *ns, struct aa_label *label,  in use_label_hname()  argument
1479 	if (label->hname && (!ns || labels_ns(label) == ns) &&  in use_label_hname()
1553 static const char *label_modename(struct aa_ns *ns, struct aa_label *label,  in label_modename()  argument
1560 	label_for_each(i, label, profile) {  in label_modename()
1586 static inline bool display_mode(struct aa_ns *ns, struct aa_label *label,  in display_mode()  argument
1593 		label_for_each(i, label, profile) {  in display_mode()
1624 		      struct aa_label *label, int flags)  in aa_label_snxprint()  argument
1633 	AA_BUG(!label);  in aa_label_snxprint()
1640 		ns = labels_ns(label);  in aa_label_snxprint()
1643 	label_for_each(i, label, profile) {  in aa_label_snxprint()
1666 	if (display_mode(ns, label, flags)) {  in aa_label_snxprint()
1668 			       label_modename(ns, label, flags));  in aa_label_snxprint()
1687 int aa_label_asxprint(char **strp, struct aa_ns *ns, struct aa_label *label,  in aa_label_asxprint()  argument
1693 	AA_BUG(!label);  in aa_label_asxprint()
1695 	size = aa_label_snxprint(NULL, 0, ns, label, flags);  in aa_label_asxprint()
1702 	return aa_label_snxprint(*strp, size + 1, ns, label, flags);  in aa_label_asxprint()
1717 			 struct aa_label *label, int flags, gfp_t gfp)  in aa_label_acntsxprint()  argument
1722 	AA_BUG(!label);  in aa_label_acntsxprint()
1724 	size = aa_label_snxprint(NULL, 0, ns, label, flags);  in aa_label_acntsxprint()
1731 	return aa_label_snxprint(*strp, size + 1, ns, label, flags);  in aa_label_acntsxprint()
1736 		     struct aa_label *label, int flags, gfp_t gfp)  in aa_label_xaudit()  argument
1743 	AA_BUG(!label);  in aa_label_xaudit()
1745 	if (!use_label_hname(ns, label, flags) ||  in aa_label_xaudit()
1746 	    display_mode(ns, label, flags)) {  in aa_label_xaudit()
1747 		len  = aa_label_asxprint(&name, ns, label, flags, gfp);  in aa_label_xaudit()
1754 		str = (char *) label->hname;  in aa_label_xaudit()
1766 			 struct aa_label *label, int flags, gfp_t gfp)  in aa_label_seq_xprint()  argument
1769 	AA_BUG(!label);  in aa_label_seq_xprint()
1771 	if (!use_label_hname(ns, label, flags)) {  in aa_label_seq_xprint()
1775 		len = aa_label_asxprint(&str, ns, label, flags, gfp);  in aa_label_seq_xprint()
1782 	} else if (display_mode(ns, label, flags))  in aa_label_seq_xprint()
1783 		seq_printf(f, "%s (%s)", label->hname,  in aa_label_seq_xprint()
1784 			   label_modename(ns, label, flags));  in aa_label_seq_xprint()
1786 		seq_puts(f, label->hname);  in aa_label_seq_xprint()
1789 void aa_label_xprintk(struct aa_ns *ns, struct aa_label *label, int flags,  in aa_label_xprintk()  argument
1792 	AA_BUG(!label);  in aa_label_xprintk()
1794 	if (!use_label_hname(ns, label, flags)) {  in aa_label_xprintk()
1798 		len = aa_label_asxprint(&str, ns, label, flags, gfp);  in aa_label_xprintk()
1805 	} else if (display_mode(ns, label, flags))  in aa_label_xprintk()
1806 		pr_info("%s (%s)", label->hname,  in aa_label_xprintk()
1807 		       label_modename(ns, label, flags));  in aa_label_xprintk()
1809 		pr_info("%s", label->hname);  in aa_label_xprintk()
1812 void aa_label_audit(struct audit_buffer *ab, struct aa_label *label, gfp_t gfp)  in aa_label_audit()  argument
1816 	aa_label_xaudit(ab, ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_audit()
1820 void aa_label_seq_print(struct seq_file *f, struct aa_label *label, gfp_t gfp)  in aa_label_seq_print()  argument
1824 	aa_label_seq_xprint(f, ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_seq_print()
1828 void aa_label_printk(struct aa_label *label, gfp_t gfp)  in aa_label_printk()  argument
1832 	aa_label_xprintk(ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_printk()
1890 	struct aa_label *label, *currbase = base;  in aa_label_strn_parse()  local
1900 			    base != &root_ns->unconfined->label))  in aa_label_strn_parse()
1929 			currbase = &vec[i]->label;  in aa_label_strn_parse()
1941 		return &vec[0]->label;  in aa_label_strn_parse()
1946 		label = aa_get_label(&vec[0]->label);  in aa_label_strn_parse()
1951 		label = aa_vec_find_or_create_label(vec, len, gfp);  in aa_label_strn_parse()
1953 		label = vec_find(vec, len);  in aa_label_strn_parse()
1954 	if (!label)  in aa_label_strn_parse()
1960 	return label;  in aa_label_strn_parse()
1963 	label = ERR_PTR(-ENOENT);  in aa_label_strn_parse()
2014 	struct aa_label *label;  in labelset_next_stale()  local
2023 		label = rb_entry(node, struct aa_label, node);  in labelset_next_stale()
2024 		if ((label_is_stale(label) ||  in labelset_next_stale()
2025 		     vec_is_stale(label->vec, label->size)) &&  in labelset_next_stale()
2026 		    __aa_get_label(label))  in labelset_next_stale()
2030 	label = NULL;  in labelset_next_stale()
2035 	return label;  in labelset_next_stale()
2050 static struct aa_label *__label_update(struct aa_label *label)  in __label_update()  argument
2057 	AA_BUG(!label);  in __label_update()
2058 	AA_BUG(!mutex_is_locked(&labels_ns(label)->lock));  in __label_update()
2060 	new = aa_label_alloc(label->size, label->proxy, GFP_KERNEL);  in __label_update()
2068 	ls = labels_set(label);  in __label_update()
2070 	for (i = 0; i < label->size; i++) {  in __label_update()
2071 		AA_BUG(!label->vec[i]);  in __label_update()
2072 		new->vec[i] = aa_get_newest_profile(label->vec[i]);  in __label_update()
2074 		AA_BUG(!new->vec[i]->label.proxy);  in __label_update()
2075 		AA_BUG(!new->vec[i]->label.proxy->label);  in __label_update()
2076 		if (new->vec[i]->label.proxy != label->vec[i]->label.proxy)  in __label_update()
2086 			tmp = aa_get_label(&new->vec[0]->label);  in __label_update()
2087 			AA_BUG(tmp == label);  in __label_update()
2090 		if (labels_set(label) != labels_set(new)) {  in __label_update()
2097 		AA_BUG(labels_ns(label) != labels_ns(new));  in __label_update()
2099 	tmp = __label_insert(labels_set(label), new, true);  in __label_update()
2102 	__label_remove(label, tmp);  in __label_update()
2124 	struct aa_label *label;  in __labelset_update()  local
2130 		label = labelset_next_stale(&ns->labels);  in __labelset_update()
2131 		if (label) {  in __labelset_update()
2132 			struct aa_label *l = __label_update(label);  in __labelset_update()
2135 			aa_put_label(label);  in __labelset_update()
2137 	} while (label);  in __labelset_update()