tree 8b390e53636092477c82304b7f7f10524df6fd1b
parent 15446235367fa4a621ff5abfa4b6ebbe25b33763
author Vesa-Matti Kari <vmkari@cc.helsinki.fi> 1218036291 +0300
committer James Morris <jmorris@namei.org> 1218063376 +1000

selinux: conditional expression type validation was off-by-one

expr_isvalid() in conditional.c was off-by-one and allowed
invalid expression type COND_LAST. However, it is this header file
that needs to be fixed. That way the if-statement's disjunction's
second component reads more naturally, "if expr type is greater than
the last allowed value" ( rather than using ">=" in conditional.c):

  if (expr->expr_type <= 0 || expr->expr_type > COND_LAST)

Signed-off-by: Vesa-Matti Kari <vmkari@cc.helsinki.fi>
Signed-off-by: James Morris <jmorris@namei.org>