提交 210bd463 编写于 作者: Z Zhang Tianxing 提交者: Zheng Zengkai

Revert "keys: Include key domain tag in the iterative search"

hulk inclusion
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I4O25G
CVE: NA

--------------------------------

This reverts commit 44313f67.
Signed-off-by: NZhang Tianxing <zhangtianxing3@huawei.com>
Acked-by: NXie XiuQi <xiexiuqi@huawei.com>
Acked-by: Xiu Jianfeng<xiujianfeng@huawei.com>
Signed-off-by: NZheng Zengkai <zhengzengkai@huawei.com>
上级 f0220ffe
...@@ -249,15 +249,9 @@ static bool asymmetric_key_cmp(const struct key *key, ...@@ -249,15 +249,9 @@ static bool asymmetric_key_cmp(const struct key *key,
{ {
const struct asymmetric_key_ids *kids = asymmetric_key_ids(key); const struct asymmetric_key_ids *kids = asymmetric_key_ids(key);
const struct asymmetric_key_id *match_id = match_data->preparsed; const struct asymmetric_key_id *match_id = match_data->preparsed;
bool match;
match = asymmetric_match_key_ids(kids, match_id, return asymmetric_match_key_ids(kids, match_id,
asymmetric_key_id_same); asymmetric_key_id_same);
if (match_data->domain_tag)
match &= key->index_key.domain_tag == match_data->domain_tag;
return match;
} }
/* /*
...@@ -268,15 +262,9 @@ static bool asymmetric_key_cmp_partial(const struct key *key, ...@@ -268,15 +262,9 @@ static bool asymmetric_key_cmp_partial(const struct key *key,
{ {
const struct asymmetric_key_ids *kids = asymmetric_key_ids(key); const struct asymmetric_key_ids *kids = asymmetric_key_ids(key);
const struct asymmetric_key_id *match_id = match_data->preparsed; const struct asymmetric_key_id *match_id = match_data->preparsed;
bool match;
match = asymmetric_match_key_ids(kids, match_id,
asymmetric_key_id_partial);
if (match_data->domain_tag)
match &= key->index_key.domain_tag == match_data->domain_tag;
return match; return asymmetric_match_key_ids(kids, match_id,
asymmetric_key_id_partial);
} }
/* /*
......
...@@ -55,7 +55,6 @@ struct key_match_data { ...@@ -55,7 +55,6 @@ struct key_match_data {
unsigned lookup_type; /* Type of lookup for this search. */ unsigned lookup_type; /* Type of lookup for this search. */
#define KEYRING_SEARCH_LOOKUP_DIRECT 0x0000 /* Direct lookup by description. */ #define KEYRING_SEARCH_LOOKUP_DIRECT 0x0000 /* Direct lookup by description. */
#define KEYRING_SEARCH_LOOKUP_ITERATE 0x0001 /* Iterative search. */ #define KEYRING_SEARCH_LOOKUP_ITERATE 0x0001 /* Iterative search. */
struct key_tag *domain_tag; /* Key domain tag */
}; };
/* /*
......
...@@ -565,13 +565,7 @@ int restrict_link_reject(struct key *keyring, ...@@ -565,13 +565,7 @@ int restrict_link_reject(struct key *keyring,
bool key_default_cmp(const struct key *key, bool key_default_cmp(const struct key *key,
const struct key_match_data *match_data) const struct key_match_data *match_data)
{ {
bool match; return strcmp(key->description, match_data->raw_data) == 0;
match = strcmp(key->description, match_data->raw_data) == 0;
if (match_data->domain_tag)
match &= key->index_key.domain_tag == match_data->domain_tag;
return match;
} }
/* /*
...@@ -963,8 +957,6 @@ key_ref_t keyring_search_tag(key_ref_t keyring, ...@@ -963,8 +957,6 @@ key_ref_t keyring_search_tag(key_ref_t keyring,
if (recurse) if (recurse)
ctx.flags |= KEYRING_SEARCH_RECURSE; ctx.flags |= KEYRING_SEARCH_RECURSE;
if (domain_tag)
ctx.match_data.domain_tag = domain_tag;
if (type->match_preparse) { if (type->match_preparse) {
ret = type->match_preparse(&ctx.match_data); ret = type->match_preparse(&ctx.match_data);
if (ret < 0) if (ret < 0)
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册