tree ba8ac3765ae60f1bc8ce20d280baa741eb7b046e
parent 6b8c92ba07287578718335ce409de8e8d7217e40
author Nelson Elhage <nelhage@ksplice.com> 1288802141 +0000
committer David S. Miller <davem@davemloft.net> 1288898794 -0700

inet_diag: Make sure we actually run the same bytecode we audited.

We were using nlmsg_find_attr() to look up the bytecode by attribute when
auditing, but then just using the first attribute when actually running
bytecode. So, if we received a message with two attribute elements, where only
the second had type INET_DIAG_REQ_BYTECODE, we would validate and run different
bytecode strings.

Fix this by consistently using nlmsg_find_attr everywhere.

Signed-off-by: Nelson Elhage <nelhage@ksplice.com>
Signed-off-by: Thomas Graf <tgraf@infradead.org>
Signed-off-by: David S. Miller <davem@davemloft.net>