Home
last modified time | relevance | path

Searched hist:ed686308c6837ff67f56e4115d0fd6bdc65a4313 (Results 1 – 1 of 1) sorted by relevance

/openbmc/linux/security/apparmor/
H A Dmatch.cdiff ed686308c6837ff67f56e4115d0fd6bdc65a4313 Mon Feb 18 18:12:34 CST 2013 John Johansen <john.johansen@canonical.com> apparmor: reserve and mask off the top 8 bits of the base field

The top 8 bits of the base field have never been used, in fact can't
be used, by the current 'dfa16' format. However they will be used in the
future as flags, so mask them off when using base as an index value.

Note: the use of the top 8 bits, without masking is trapped by the verify
checks that base entries are within the size bounds.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>