On Tue, Nov 20, 2012 at 08:39:54PM -0800, John Johansen wrote: > The top 8 bits of the base field have never been used, in fact can't > be used, by the current 'dfa16' format. However they will be used in the > future as flags, so mask them off when using base as an index value. > > Note: the use of the top 8 bits, without masking is trapped by the verify > checks that base entries are within the size bounds. > > Signed-off-by: John Johansen <[email protected]>
Acked-by: Kees Cook <[email protected]> -- Kees Cook -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
