Commit 85c3b529 authored by Eric Paris's avatar Eric Paris Committed by James Morris

SELinux: header generation may hit infinite loop

If a permission name is long enough the selinux class definition generation
tool will go into a infinite loop.  This is because it's macro max() is
fooled into thinking it is dealing with unsigned numbers.  This patch makes
sure the macro always uses signed number so 1 > -1.
Signed-off-by: default avatarEric Paris <>
Signed-off-by: default avatarJames Morris <>
parent 821d35a5
......@@ -13,7 +13,7 @@ struct security_class_mapping {
#include "classmap.h"
#include "initial_sid_to_string.h"
#define max(x, y) ((x > y) ? x : y)
#define max(x, y) (((int)(x) > (int)(y)) ? x : y)
const char *progname;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment