Searched hist:ed686308c6837ff67f56e4115d0fd6bdc65a4313 (Results 1 – 1 of 1) sorted by relevance
/openbmc/linux/security/apparmor/ |
H A D | match.c | diff ed686308c6837ff67f56e4115d0fd6bdc65a4313 Mon Feb 18 18:12:34 CST 2013 John Johansen <john.johansen@canonical.com> apparmor: reserve and mask off the top 8 bits of the base field
The top 8 bits of the base field have never been used, in fact can't be used, by the current 'dfa16' format. However they will be used in the future as flags, so mask them off when using base as an index value.
Note: the use of the top 8 bits, without masking is trapped by the verify checks that base entries are within the size bounds.
Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com>
|