shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-22 22:03:43 +03:00
Code

analyze: fix offline check for syscal filter

Browse Source 
The deny/allow list check was inverted, if we are deny listing and the
hashmap contains the syscall then that's good

Fixes https://github.com/systemd/systemd/issues/22914

(cherry picked from commit dd51e725df9aec2847482131ef601e0215b371a0)
This commit is contained in:
Luca Boccassi 2022-04-01 00:54:53 +01:00 committed by Zbigniew Jędrzejewski-Szmek
parent 8ed1490de6
commit b5dfdf0301
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/analyze/analyze-security.c
View File

@ -587,7 +587,7 @@ static bool syscall_names_in_filter(Hashmap *s, bool allow_list, const SyscallFi
if (id < 0)
continue;
if (hashmap_contains(s, syscall) == allow_list) {
if (hashmap_contains(s, syscall) != allow_list) {
log_debug("Offending syscall filter item: %s", syscall);
if (ret_offending_syscall)
*ret_offending_syscall = syscall;