tree ee3165623276d8528fc7d2130ed1d582b78fe1d8
parent 9817e237916af43481820974759da79df7487c6f
author Eugene Teo <eteo@redhat.com> 1239588281 +0800
committer Greg Kroah-Hartman <gregkh@suse.de> 1241287041 -0700

unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)

Not upstream in 2.6.30, as the function was removed there, making this a
non-issue.

Node and port send checks can skip in the compat_net=1 case. This bug
was introduced in commit effad8d.

Signed-off-by: Eugene Teo <eugeneteo@kernel.sg>
Reported-by: Dan Carpenter <error27@gmail.com>
Acked-by: James Morris <jmorris@namei.org>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>