[RFC PATCH 2/3] fixup! audit: remove arch_f pointer from struct audit_krule

[Richard Guy Briggs]

Signed-off-by: Richard Guy Briggs <r...@redhat.com>
---
 kernel/auditfilter.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
index 3343d1c..48dcb59 100644
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
@@ -221,11 +221,13 @@ static inline int audit_match_class_bits(int class, u32 
*mask)
 static int audit_match_signal(struct audit_entry *entry)
 {
        int i;
+       u32 archval;
        struct audit_field *arch;
 
        for (i = 0; i < entry->rule.field_count; i++)
                if (entry->rule.fields[i].type == AUDIT_ARCH) {
                        arch = &entry->rule.fields[i];
+                       archval = arch->val;
                        break;
                }
 
@@ -238,7 +240,7 @@ static int audit_match_signal(struct audit_entry *entry)
                                               entry->rule.mask));
        }
 
-       switch(audit_classify_arch(arch->val)) {
+       switch(audit_classify_arch(archval)) {
        case 0: /* native */
                return (audit_match_class_bits(AUDIT_CLASS_SIGNAL,
                                               entry->rule.mask));
-- 
1.8.3.1

--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit