50 		aa_put_label(rcu_dereference_protected(proxy->label, true));  in free_proxy()
52 		RCU_INIT_POINTER(proxy->label, (struct aa_label *)PROXY_POISON);  in free_proxy()
64 struct aa_proxy *aa_alloc_proxy(struct aa_label *label, gfp_t gfp)  in aa_alloc_proxy()  argument
71 		rcu_assign_pointer(new->label, aa_get_label(label));  in aa_alloc_proxy()
85 	tmp = rcu_dereference_protected(orig->proxy->label,  in __aa_proxy_redirect()
87 	rcu_assign_pointer(orig->proxy->label, aa_get_label(new));  in __aa_proxy_redirect()
316 static void label_destroy(struct aa_label *label)  in label_destroy()  argument
320 	AA_BUG(!label);  in label_destroy()
322 	if (!label_isprofile(label)) {  in label_destroy()
326 		aa_put_str(label->hname);  in label_destroy()
328 		label_for_each(i, label, profile) {  in label_destroy()
330 			label->vec[i.i] = (struct aa_profile *)  in label_destroy()
335 	if (rcu_dereference_protected(label->proxy->label, true) == label)  in label_destroy()
336 		rcu_assign_pointer(label->proxy->label, NULL);  in label_destroy()
338 	aa_free_secid(label->secid);  in label_destroy()
340 	tmp = rcu_dereference_protected(label->proxy->label, true);  in label_destroy()
341 	if (tmp == label)  in label_destroy()
342 		rcu_assign_pointer(label->proxy->label, NULL);  in label_destroy()
344 	aa_put_proxy(label->proxy);  in label_destroy()
345 	label->proxy = (struct aa_proxy *) PROXY_POISON + 1;  in label_destroy()
348 void aa_label_free(struct aa_label *label)  in aa_label_free()  argument
350 	if (!label)  in aa_label_free()
353 	label_destroy(label);  in aa_label_free()
354 	kfree(label);  in aa_label_free()
357 static void label_free_switch(struct aa_label *label)  in label_free_switch()  argument
359 	if (label->flags & FLAG_NS_COUNT)  in label_free_switch()
360 		aa_free_ns(labels_ns(label));  in label_free_switch()
361 	else if (label_isprofile(label))  in label_free_switch()
362 		aa_free_profile(labels_profile(label));  in label_free_switch()
364 		aa_label_free(label);  in label_free_switch()
369 	struct aa_label *label = container_of(head, struct aa_label, rcu);  in label_free_rcu()  local
371 	if (label->flags & FLAG_IN_TREE)  in label_free_rcu()
372 		(void) aa_label_remove(label);  in label_free_rcu()
373 	label_free_switch(label);  in label_free_rcu()
378 	struct aa_label *label = container_of(kref, struct aa_label, count);  in aa_label_kref()  local
379 	struct aa_ns *ns = labels_ns(label);  in aa_label_kref()
383 		label_free_switch(label);  in aa_label_kref()
387 	AA_BUG(label_isprofile(label) &&  in aa_label_kref()
388 	       on_list_rcu(&label->vec[0]->base.profiles));  in aa_label_kref()
389 	AA_BUG(label_isprofile(label) &&  in aa_label_kref()
390 	       on_list_rcu(&label->vec[0]->base.list));  in aa_label_kref()
393 	call_rcu(&label->rcu, label_free_rcu);  in aa_label_kref()
396 static void label_free_or_put_new(struct aa_label *label, struct aa_label *new)  in label_free_or_put_new()  argument
398 	if (label != new)  in label_free_or_put_new()
405 bool aa_label_init(struct aa_label *label, int size, gfp_t gfp)  in aa_label_init()  argument
407 	AA_BUG(!label);  in aa_label_init()
410 	if (aa_alloc_secid(label, gfp) < 0)  in aa_label_init()
413 	label->size = size;			/* doesn't include null */  in aa_label_init()
414 	label->vec[size] = NULL;		/* null terminate */  in aa_label_init()
415 	kref_init(&label->count);  in aa_label_init()
416 	RB_CLEAR_NODE(&label->node);  in aa_label_init()
484 int aa_label_next_confined(struct aa_label *label, int i)  in aa_label_next_confined()  argument
486 	AA_BUG(!label);  in aa_label_next_confined()
489 	for (; i < label->size; i++) {  in aa_label_next_confined()
490 		if (!profile_unconfined(label->vec[i]))  in aa_label_next_confined()
567 static bool __label_remove(struct aa_label *label, struct aa_label *new)  in __label_remove()  argument
569 	struct aa_labelset *ls = labels_set(label);  in __label_remove()
572 	AA_BUG(!label);  in __label_remove()
576 		__aa_proxy_redirect(label, new);  in __label_remove()
578 	if (!label_is_stale(label))  in __label_remove()
579 		__label_make_stale(label);  in __label_remove()
581 	if (label->flags & FLAG_IN_TREE) {  in __label_remove()
582 		rb_erase(&label->node, &ls->root);  in __label_remove()
583 		label->flags &= ~FLAG_IN_TREE;  in __label_remove()
640 				       struct aa_label *label, bool replace)  in __label_insert()  argument
645 	AA_BUG(!label);  in __label_insert()
646 	AA_BUG(labels_set(label) != ls);  in __label_insert()
648 	AA_BUG(label->flags & FLAG_IN_TREE);  in __label_insert()
654 		int result = label_cmp(label, this);  in __label_insert()
667 				__proxy_share(this, label);  in __label_insert()
668 			AA_BUG(!__label_replace(this, label));  in __label_insert()
669 			return aa_get_label(label);  in __label_insert()
677 	rb_link_node(&label->node, parent, new);  in __label_insert()
678 	rb_insert_color(&label->node, &ls->root);  in __label_insert()
679 	label->flags |= FLAG_IN_TREE;  in __label_insert()
681 	return aa_get_label(label);  in __label_insert()
731 static struct aa_label *__label_find(struct aa_label *label)  in __label_find()  argument
733 	AA_BUG(!label);  in __label_find()
735 	return __vec_find(label->vec, label->size);  in __label_find()
746 bool aa_label_remove(struct aa_label *label)  in aa_label_remove()  argument
748 	struct aa_labelset *ls = labels_set(label);  in aa_label_remove()
755 	res = __label_remove(label, ns_unconfined(labels_ns(label)));  in aa_label_remove()
813 	struct aa_label *label;  in vec_find()  local
822 	label = __vec_find(vec, n);  in vec_find()
825 	return label;  in vec_find()
832 	struct aa_label *label = NULL;  in vec_create_and_insert_label()  local
841 		return aa_get_label(&vec[0]->label);  in vec_create_and_insert_label()
843 	ls = labels_set(&vec[len - 1]->label);  in vec_create_and_insert_label()
856 	label = __label_insert(ls, new, false);  in vec_create_and_insert_label()
858 	label_free_or_put_new(label, new);  in vec_create_and_insert_label()
860 	return label;  in vec_create_and_insert_label()
866 	struct aa_label *label = vec_find(vec, len);  in aa_vec_find_or_create_label()  local
868 	if (label)  in aa_vec_find_or_create_label()
869 		return label;  in aa_vec_find_or_create_label()
884 struct aa_label *aa_label_find(struct aa_label *label)  in aa_label_find()  argument
886 	AA_BUG(!label);  in aa_label_find()
888 	return vec_find(label->vec, label->size);  in aa_label_find()
902 struct aa_label *aa_label_insert(struct aa_labelset *ls, struct aa_label *label)  in aa_label_insert()  argument
908 	AA_BUG(!label);  in aa_label_insert()
911 	if (!label_is_stale(label)) {  in aa_label_insert()
913 		l = __label_find(label);  in aa_label_insert()
920 	l = __label_insert(ls, label, false);  in aa_label_insert()
1027 	struct aa_label *label;  in label_merge_insert()  local
1046 			AA_BUG(!new->vec[k]->label.proxy);  in label_merge_insert()
1047 			AA_BUG(!new->vec[k]->label.proxy->label);  in label_merge_insert()
1048 			if (next->label.proxy != new->vec[k]->label.proxy)  in label_merge_insert()
1064 			label = aa_get_label(&new->vec[0]->label);  in label_merge_insert()
1065 			return label;  in label_merge_insert()
1081 	label = __label_insert(labels_set(new), new, false);  in label_merge_insert()
1084 	return label;  in label_merge_insert()
1160 	struct aa_label *label, *ar = NULL, *br = NULL;  in aa_label_find_merge()  local
1172 	label = __label_find_merge(ls, a, b);  in aa_label_find_merge()
1177 	return label;  in aa_label_find_merge()
1197 	struct aa_label *label = NULL;  in aa_label_merge()  local
1211 	if (!label) {  in aa_label_merge()
1224 		label = label_merge_insert(new, a, b);  in aa_label_merge()
1225 		label_free_or_put_new(label, new);  in aa_label_merge()
1231 	return label;  in aa_label_merge()
1235 				    struct aa_label *label)  in label_is_visible()  argument
1237 	return aa_ns_visible(profile->ns, labels_ns(label), true);  in label_is_visible()
1278 				struct aa_label *label,  in label_compound_match()  argument
1286 	label_for_each(i, label, tp) {  in label_compound_match()
1300 	label_for_each_cont(i, label, tp) {  in label_compound_match()
1336 				  struct aa_label *label, unsigned int start,  in label_components_match()  argument
1346 	label_for_each(i, label, tp) {  in label_components_match()
1362 	label_for_each_cont(i, label, tp) {  in label_components_match()
1394 int aa_label_match(struct aa_profile *profile, struct aa_label *label,  in aa_label_match()  argument
1398 	int error = label_compound_match(profile, label, state, subns, request,  in aa_label_match()
1404 	return label_components_match(profile, label, state, subns, request,  in aa_label_match()
1420 bool aa_update_label_name(struct aa_ns *ns, struct aa_label *label, gfp_t gfp)  in aa_update_label_name()  argument
1428 	AA_BUG(!label);  in aa_update_label_name()
1430 	if (label->hname || labels_ns(label) != ns)  in aa_update_label_name()
1433 	if (aa_label_acntsxprint(&name, ns, label, FLAGS_NONE, gfp) == -1)  in aa_update_label_name()
1436 	ls = labels_set(label);  in aa_update_label_name()
1438 	if (!label->hname && label->flags & FLAG_IN_TREE) {  in aa_update_label_name()
1439 		label->hname = name;  in aa_update_label_name()
1452 static inline bool use_label_hname(struct aa_ns *ns, struct aa_label *label,  in use_label_hname()  argument
1455 	if (label->hname && (!ns || labels_ns(label) == ns) &&  in use_label_hname()
1527 static const char *label_modename(struct aa_ns *ns, struct aa_label *label,  in label_modename()  argument
1534 	label_for_each(i, label, profile) {  in label_modename()
1560 static inline bool display_mode(struct aa_ns *ns, struct aa_label *label,  in display_mode()  argument
1567 		label_for_each(i, label, profile) {  in display_mode()
1598 		      struct aa_label *label, int flags)  in aa_label_snxprint()  argument
1607 	AA_BUG(!label);  in aa_label_snxprint()
1614 		ns = labels_ns(label);  in aa_label_snxprint()
1617 	label_for_each(i, label, profile) {  in aa_label_snxprint()
1640 	if (display_mode(ns, label, flags)) {  in aa_label_snxprint()
1642 			       label_modename(ns, label, flags));  in aa_label_snxprint()
1661 int aa_label_asxprint(char **strp, struct aa_ns *ns, struct aa_label *label,  in aa_label_asxprint()  argument
1667 	AA_BUG(!label);  in aa_label_asxprint()
1669 	size = aa_label_snxprint(NULL, 0, ns, label, flags);  in aa_label_asxprint()
1676 	return aa_label_snxprint(*strp, size + 1, ns, label, flags);  in aa_label_asxprint()
1691 			 struct aa_label *label, int flags, gfp_t gfp)  in aa_label_acntsxprint()  argument
1696 	AA_BUG(!label);  in aa_label_acntsxprint()
1698 	size = aa_label_snxprint(NULL, 0, ns, label, flags);  in aa_label_acntsxprint()
1705 	return aa_label_snxprint(*strp, size + 1, ns, label, flags);  in aa_label_acntsxprint()
1710 		     struct aa_label *label, int flags, gfp_t gfp)  in aa_label_xaudit()  argument
1717 	AA_BUG(!label);  in aa_label_xaudit()
1719 	if (!use_label_hname(ns, label, flags) ||  in aa_label_xaudit()
1720 	    display_mode(ns, label, flags)) {  in aa_label_xaudit()
1721 		len  = aa_label_asxprint(&name, ns, label, flags, gfp);  in aa_label_xaudit()
1728 		str = (char *) label->hname;  in aa_label_xaudit()
1740 			 struct aa_label *label, int flags, gfp_t gfp)  in aa_label_seq_xprint()  argument
1743 	AA_BUG(!label);  in aa_label_seq_xprint()
1745 	if (!use_label_hname(ns, label, flags)) {  in aa_label_seq_xprint()
1749 		len = aa_label_asxprint(&str, ns, label, flags, gfp);  in aa_label_seq_xprint()
1756 	} else if (display_mode(ns, label, flags))  in aa_label_seq_xprint()
1757 		seq_printf(f, "%s (%s)", label->hname,  in aa_label_seq_xprint()
1758 			   label_modename(ns, label, flags));  in aa_label_seq_xprint()
1760 		seq_printf(f, "%s", label->hname);  in aa_label_seq_xprint()
1763 void aa_label_xprintk(struct aa_ns *ns, struct aa_label *label, int flags,  in aa_label_xprintk()  argument
1766 	AA_BUG(!label);  in aa_label_xprintk()
1768 	if (!use_label_hname(ns, label, flags)) {  in aa_label_xprintk()
1772 		len = aa_label_asxprint(&str, ns, label, flags, gfp);  in aa_label_xprintk()
1779 	} else if (display_mode(ns, label, flags))  in aa_label_xprintk()
1780 		pr_info("%s (%s)", label->hname,  in aa_label_xprintk()
1781 		       label_modename(ns, label, flags));  in aa_label_xprintk()
1783 		pr_info("%s", label->hname);  in aa_label_xprintk()
1786 void aa_label_audit(struct audit_buffer *ab, struct aa_label *label, gfp_t gfp)  in aa_label_audit()  argument
1790 	aa_label_xaudit(ab, ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_audit()
1794 void aa_label_seq_print(struct seq_file *f, struct aa_label *label, gfp_t gfp)  in aa_label_seq_print()  argument
1798 	aa_label_seq_xprint(f, ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_seq_print()
1802 void aa_label_printk(struct aa_label *label, gfp_t gfp)  in aa_label_printk()  argument
1806 	aa_label_xprintk(ns, label, FLAG_VIEW_SUBNS, gfp);  in aa_label_printk()
1864 	struct aa_label *label, *currbase = base;  in aa_label_strn_parse()  local
1873 	if (str == NULL || (*str == '=' && base != &root_ns->unconfined->label))  in aa_label_strn_parse()
1902 			currbase = &vec[i]->label;  in aa_label_strn_parse()
1914 		return &vec[0]->label;  in aa_label_strn_parse()
1919 		label = aa_get_label(&vec[0]->label);  in aa_label_strn_parse()
1924 		label = aa_vec_find_or_create_label(vec, len, gfp);  in aa_label_strn_parse()
1926 		label = vec_find(vec, len);  in aa_label_strn_parse()
1927 	if (!label)  in aa_label_strn_parse()
1933 	return label;  in aa_label_strn_parse()
1936 	label = ERR_PTR(-ENOENT);  in aa_label_strn_parse()
1987 	struct aa_label *label;  in labelset_next_stale()  local
1996 		label = rb_entry(node, struct aa_label, node);  in labelset_next_stale()
1997 		if ((label_is_stale(label) ||  in labelset_next_stale()
1998 		     vec_is_stale(label->vec, label->size)) &&  in labelset_next_stale()
1999 		    __aa_get_label(label))  in labelset_next_stale()
2003 	label = NULL;  in labelset_next_stale()
2008 	return label;  in labelset_next_stale()
2023 static struct aa_label *__label_update(struct aa_label *label)  in __label_update()  argument
2030 	AA_BUG(!label);  in __label_update()
2031 	AA_BUG(!mutex_is_locked(&labels_ns(label)->lock));  in __label_update()
2033 	new = aa_label_alloc(label->size, label->proxy, GFP_KERNEL);  in __label_update()
2041 	ls = labels_set(label);  in __label_update()
2043 	for (i = 0; i < label->size; i++) {  in __label_update()
2044 		AA_BUG(!label->vec[i]);  in __label_update()
2045 		new->vec[i] = aa_get_newest_profile(label->vec[i]);  in __label_update()
2047 		AA_BUG(!new->vec[i]->label.proxy);  in __label_update()
2048 		AA_BUG(!new->vec[i]->label.proxy->label);  in __label_update()
2049 		if (new->vec[i]->label.proxy != label->vec[i]->label.proxy)  in __label_update()
2059 			tmp = aa_get_label(&new->vec[0]->label);  in __label_update()
2060 			AA_BUG(tmp == label);  in __label_update()
2063 		if (labels_set(label) != labels_set(new)) {  in __label_update()
2070 		AA_BUG(labels_ns(label) != labels_ns(new));  in __label_update()
2072 	tmp = __label_insert(labels_set(label), new, true);  in __label_update()
2075 	__label_remove(label, tmp);  in __label_update()
2097 	struct aa_label *label;  in __labelset_update()  local
2103 		label = labelset_next_stale(&ns->labels);  in __labelset_update()
2104 		if (label) {  in __labelset_update()
2105 			struct aa_label *l = __label_update(label);  in __labelset_update()
2108 			aa_put_label(label);  in __labelset_update()
2110 	} while (label);  in __labelset_update()