diff options
| author | Kees Cook <keescook@chromium.org> | 2020-06-19 21:20:15 +0200 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2020-07-11 01:01:52 +0200 |
| commit | fe4bfff86ec54773df3db79e8112e3b0f820c799 (patch) | |
| tree | cee16ed72bbd27d395c6394252ec9a9cd0160862 /security/commoncap.c | |
| parent | seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID (diff) | |
| download | linux-fe4bfff86ec54773df3db79e8112e3b0f820c799.tar.xz linux-fe4bfff86ec54773df3db79e8112e3b0f820c799.zip | |
seccomp: Use -1 marker for end of mode 1 syscall list
The terminator for the mode 1 syscalls list was a 0, but that could be
a valid syscall number (e.g. x86_64 __NR_read). By luck, __NR_read was
listed first and the loop construct would not test it, so there was no
bug. However, this is fragile. Replace the terminator with -1 instead,
and make the variable name for mode 1 syscall lists more descriptive.
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Will Drewry <wad@chromium.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/commoncap.c')
0 files changed, 0 insertions, 0 deletions