imrcpan/erofs-linux
1
0 Fork 0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git synced 2026-10-30 05:42:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

selinux: replace BUG_ONs with WARN_ONs in avc.c

Browse Source 
These checks are only guarding against programming errors that could
silently grant too many permissions. These cases are better handled with
WARN_ON(), since it doesn't really help much to crash the machine in
this case.

Signed-off-by: Ondrej Mosnacek <[email protected]>
Reviewed-by: Stephen Smalley <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
This commit is contained in:
Ondrej Mosnacek authored and Paul Moore committed 2019-01-28 18:10:28 -05:00
1 parent fede148324
commit e6f2f381e4
1 file changed
+4 -2
Download Patch File Download Diff File Expand all files Collapse all files
security/selinux/avc.c
+4 -2
View File
@@ -1059,7 +1059,8 @@ int avc_has_extended_perms(struct selinux_state *state,
int rc = 0, rc2;
xp_node = &local_xp_node;
BUG_ON(!requested);
if (WARN_ON(!requested))
return -EACCES;
rcu_read_lock();
@@ -1149,7 +1150,8 @@ inline int avc_has_perm_noaudit(struct selinux_state *state,
int rc = 0;
u32 denied;
BUG_ON(!requested);
if (WARN_ON(!requested))
return -EACCES;
rcu_read_lock();