diff options
| author | John Johansen <john.johansen@canonical.com> | 2016-04-11 16:55:10 -0700 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2016-07-12 08:43:10 -0700 |
| commit | dcda617a0c5160c73e0aa02813c871339ea08004 (patch) | |
| tree | 6bea67854d3f63fea51e4199d5f87a2c2d31a2a6 /security | |
| parent | e1e5fa961612d774c122fc79f93a50a9dc8db321 (diff) | |
| download | op-kernel-dev-dcda617a0c5160c73e0aa02813c871339ea08004.zip op-kernel-dev-dcda617a0c5160c73e0aa02813c871339ea08004.tar.gz | |
apparmor: fix refcount bug in profile replacement
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/apparmor/policy.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/security/apparmor/policy.c b/security/apparmor/policy.c index 705c287..222052f 100644 --- a/security/apparmor/policy.c +++ b/security/apparmor/policy.c @@ -1189,12 +1189,12 @@ ssize_t aa_replace_profiles(void *udata, size_t size, bool noreplace) aa_get_profile(newest); aa_put_profile(parent); rcu_assign_pointer(ent->new->parent, newest); - } else - aa_put_profile(newest); + } /* aafs interface uses replacedby */ rcu_assign_pointer(ent->new->replacedby->profile, aa_get_profile(ent->new)); __list_add_profile(&parent->base.profiles, ent->new); + aa_put_profile(newest); } else { /* aafs interface uses replacedby */ rcu_assign_pointer(ent->new->replacedby->profile, |
