diff options
Diffstat (limited to 'kernel/auditfilter.c')
-rw-r--r-- | kernel/auditfilter.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c index d5e54e944f72..e69d136eeaf6 100644 --- a/kernel/auditfilter.c +++ b/kernel/auditfilter.c | |||
@@ -391,6 +391,7 @@ static int audit_field_valid(struct audit_entry *entry, struct audit_field *f) | |||
391 | case AUDIT_SUBJ_CLR: | 391 | case AUDIT_SUBJ_CLR: |
392 | case AUDIT_OBJ_LEV_LOW: | 392 | case AUDIT_OBJ_LEV_LOW: |
393 | case AUDIT_OBJ_LEV_HIGH: | 393 | case AUDIT_OBJ_LEV_HIGH: |
394 | case AUDIT_SADDR_FAM: | ||
394 | /* bit ops are only useful on syscall args */ | 395 | /* bit ops are only useful on syscall args */ |
395 | if (f->op == Audit_bitmask || f->op == Audit_bittest) | 396 | if (f->op == Audit_bitmask || f->op == Audit_bittest) |
396 | return -EINVAL; | 397 | return -EINVAL; |
@@ -438,6 +439,10 @@ static int audit_field_valid(struct audit_entry *entry, struct audit_field *f) | |||
438 | if (f->val > AUDIT_MAX_FIELD_COMPARE) | 439 | if (f->val > AUDIT_MAX_FIELD_COMPARE) |
439 | return -EINVAL; | 440 | return -EINVAL; |
440 | break; | 441 | break; |
442 | case AUDIT_SADDR_FAM: | ||
443 | if (f->val >= AF_MAX) | ||
444 | return -EINVAL; | ||
445 | break; | ||
441 | default: | 446 | default: |
442 | break; | 447 | break; |
443 | } | 448 | } |