MFC r334296:

Fix "Bad tailq" panic when auditing auditon(A_SETCLASS, ...) Due to an oversight in r195280, auditon(A_SETCLASS, ...) would cause a tailq element to get added to the tailq twice, resulting in a circular tailq. This panics when INVARIANTS are on. Differential Revision: https://reviews.freebsd.org/D15381
HardenedBSD · Jul 11, 2018 · 2629e78 · 2629e78
1 parent 29b48ac
commit 2629e78
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c
@@ -418,7 +418,6 @@ audit_sys_auditon(struct audit_record *ar, struct au_record *rec)
 		break;
 
 	case A_SETCLASS:
-		kau_write(rec, tok);
 		tok = au_to_arg32(2, "setclass:ec_event",
 		    ar->ar_arg_auditon.au_evclass.ec_number);
 		kau_write(rec, tok);