Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

Pull security subsystem update from James Morris:
 "This is mostly maintenance updates across the subsystem, with a
  notable update for TPM 2.0, and addition of Jarkko Sakkinen as a
  maintainer of that"

* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (40 commits)
  apparmor: clarify CRYPTO dependency
  selinux: Use a kmem_cache for allocation struct file_security_struct
  selinux: ioctl_has_perm should be static
  selinux: use sprintf return value
  selinux: use kstrdup() in security_get_bools()
  selinux: use kmemdup in security_sid_to_context_core()
  selinux: remove pointless cast in selinux_inode_setsecurity()
  selinux: introduce security_context_str_to_sid
  selinux: do not check open perm on ftruncate call
  selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default
  KEYS: Merge the type-specific data with the payload data
  KEYS: Provide a script to extract a module signature
  KEYS: Provide a script to extract the sys cert list from a vmlinux file
  keys: Be more consistent in selection of union members used
  certs: add .gitignore to stop git nagging about x509_certificate_list
  KEYS: use kvfree() in add_key
  Smack: limited capability for changing process label
  TPM: remove unnecessary little endian conversion
  vTPM: support little endian guests
  char: Drop owner assignment from i2c_driver
  ...

1 files changed, 2 insertions, 2 deletions

diff --git a/fs/ext4/crypto_key.c b/fs/ext4/crypto_key.c
index 1d510c11b100..5c52c79dea46 100644
--- a/fs/ext4/crypto_key.c
+++ b/fs/ext4/crypto_key.c
@@ -121,7 +121,7 @@ int _ext4_get_encryption_info(struct inode *inode)
         struct key *keyring_key = NULL;
         struct ext4_encryption_key *master_key;
         struct ext4_encryption_context ctx;
-        struct user_key_payload *ukp;
+        const struct user_key_payload *ukp;
         struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
         struct crypto_ablkcipher *ctfm;
         const char *cipher_str;
@@ -209,7 +209,7 @@ retry:
         }
         crypt_info->ci_keyring_key = keyring_key;
         BUG_ON(keyring_key->type != &key_type_logon);
-        ukp = ((struct user_key_payload *)keyring_key->payload.data);
+        ukp = user_key_payload(keyring_key);
         if (ukp->datalen != sizeof(struct ext4_encryption_key)) {
                 res = -EINVAL;
                 goto out;