Günther Noack a46e32db1f landlock: Clarify BUILD_BUG_ON check in scoping logic ...

The BUILD_BUG_ON check in domain_is_scoped() and
unmask_scoped_access() should check that the loop that counts down
client_layer finishes.  We therefore check that the numbers
LANDLOCK_MAX_NUM_LAYERS-1 and -1 are both representable by that
integer.  If they are representable, the numbers in between are
representable too, and the loop finishes.

Signed-off-by: Günther Noack <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Mickaël Salaün <[email protected]>

2026-04-07 18:51:07 +02:00

..

errata

landlock: Add errata documentation section

2026-02-06 17:54:43 +01:00

.kunitconfig

landlock: Add unique ID generator

2025-03-26 13:59:34 +01:00

access.h

landlock: Control pathname UNIX domain socket resolution by path

2026-04-07 18:51:06 +02:00

audit.c

landlock: Control pathname UNIX domain socket resolution by path

2026-04-07 18:51:06 +02:00

audit.h

landlock: Transpose the layer masks data structure

2026-02-10 16:46:50 +01:00

common.h

landlock: Add support for KUnit tests

2024-02-27 11:21:45 +01:00

cred.c

landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()

2026-04-07 18:50:56 +02:00

cred.h

landlock: Improve kernel-doc "Return:" section consistency

2026-04-07 18:51:04 +02:00

domain.c

landlock: Improve kernel-doc "Return:" section consistency

2026-04-07 18:51:04 +02:00

domain.h

landlock: Transpose the layer masks data structure

2026-02-10 16:46:50 +01:00

errata.h

landlock: Prepare to add second errata

2025-03-21 12:12:21 +01:00

fs.c

landlock: Clarify BUILD_BUG_ON check in scoping logic

2026-04-07 18:51:07 +02:00

fs.h

landlock: Log scoped denials

2025-03-26 13:59:42 +01:00

id.c

landlock: Improve kernel-doc "Return:" section consistency

2026-04-07 18:51:04 +02:00

id.h

landlock: Add unique ID generator

2025-03-26 13:59:34 +01:00

Kconfig

landlock: Add support for KUnit tests

2024-02-27 11:21:45 +01:00

limits.h

landlock: Control pathname UNIX domain socket resolution by path

2026-04-07 18:51:06 +02:00

Makefile

landlock: Multithreading support for landlock_restrict_self()

2026-02-06 17:54:37 +01:00

net.c

landlock: Transpose the layer masks data structure

2026-02-10 16:46:50 +01:00

net.h

landlock: Support network rules with TCP bind and connect

2023-10-26 21:07:15 +02:00

object.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

object.h

…

ruleset.c

landlock: Fix kernel-doc warning for pointer-to-array parameters

2026-04-07 18:51:05 +02:00

ruleset.h

landlock: Improve kernel-doc "Return:" section consistency

2026-04-07 18:51:04 +02:00

setup.c

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

setup.h

landlock: Add the errata interface

2025-03-21 12:12:19 +01:00

syscalls.c

landlock: Control pathname UNIX domain socket resolution by path

2026-04-07 18:51:06 +02:00

task.c

landlock: Clarify BUILD_BUG_ON check in scoping logic

2026-04-07 18:51:07 +02:00

task.h

landlock: Rename "ptrace" files to "task"

2024-03-08 18:22:16 +01:00

tsync.c

landlock: Fix formatting in tsync.c

2026-04-07 18:51:04 +02:00

tsync.h

landlock: Multithreading support for landlock_restrict_self()

2026-02-06 17:54:37 +01:00