565 static bool unpack_secmark(struct aa_ext *e, struct aa_ruleset *rules)  in unpack_secmark()  argument
575 		rules->secmark = kcalloc(size, sizeof(struct aa_secmark),  in unpack_secmark()
577 		if (!rules->secmark)  in unpack_secmark()
580 		rules->secmark_count = size;  in unpack_secmark()
583 			if (!unpack_u8(e, &rules->secmark[i].audit, NULL))  in unpack_secmark()
585 			if (!unpack_u8(e, &rules->secmark[i].deny, NULL))  in unpack_secmark()
587 			if (!aa_unpack_strdup(e, &rules->secmark[i].label, NULL))  in unpack_secmark()
599 	if (rules->secmark) {  in unpack_secmark()
601 			kfree(rules->secmark[i].label);  in unpack_secmark()
602 		kfree(rules->secmark);  in unpack_secmark()
603 		rules->secmark_count = 0;  in unpack_secmark()
604 		rules->secmark = NULL;  in unpack_secmark()
611 static bool unpack_rlimits(struct aa_ext *e, struct aa_ruleset *rules)  in unpack_rlimits()  argument
622 		rules->rlimits.mask = tmp;  in unpack_rlimits()
632 			rules->rlimits.limits[a].rlim_max = tmp2;  in unpack_rlimits()
804 	struct aa_ruleset *rules;  in unpack_profile()  local
843 	rules = list_first_entry(&profile->rules, typeof(*rules), list);  in unpack_profile()
925 	if (!aa_unpack_cap_low(e, &rules->caps.allow, NULL))  in unpack_profile()
927 	if (!aa_unpack_cap_low(e, &rules->caps.audit, NULL))  in unpack_profile()
929 	if (!aa_unpack_cap_low(e, &rules->caps.quiet, NULL))  in unpack_profile()
937 		if (!aa_unpack_cap_high(e, &rules->caps.allow, NULL))  in unpack_profile()
939 		if (!aa_unpack_cap_high(e, &rules->caps.audit, NULL))  in unpack_profile()
941 		if (!aa_unpack_cap_high(e, &rules->caps.quiet, NULL))  in unpack_profile()
952 		if (!aa_unpack_cap_low(e, &rules->caps.extended, NULL))  in unpack_profile()
954 		if (!aa_unpack_cap_high(e, &rules->caps.extended, NULL))  in unpack_profile()
965 	if (!unpack_rlimits(e, rules)) {  in unpack_profile()
970 	if (!unpack_secmark(e, rules)) {  in unpack_profile()
971 		info = "failed to unpack profile secmark rules";  in unpack_profile()
978 		error = unpack_pdb(e, &rules->policy, true, false,  in unpack_profile()
983 		if (aa_dfa_next(rules->policy.dfa, rules->policy.start[0],  in unpack_profile()
985 			rules->policy.start[AA_CLASS_FILE] =  in unpack_profile()
986 			  aa_dfa_next(rules->policy.dfa,  in unpack_profile()
987 				      rules->policy.start[0],  in unpack_profile()
991 		if (!rules->policy.perms) {  in unpack_profile()
992 			error = aa_compat_map_policy(&rules->policy,  in unpack_profile()
1000 		rules->policy.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
1001 		rules->policy.perms = kcalloc(2, sizeof(struct aa_perms),  in unpack_profile()
1003 		if (!rules->policy.perms)  in unpack_profile()
1005 		rules->policy.size = 2;  in unpack_profile()
1007 	/* get file rules */  in unpack_profile()
1008 	error = unpack_pdb(e, &rules->file, false, true, &info);  in unpack_profile()
1011 	} else if (rules->file.dfa) {  in unpack_profile()
1012 		if (!rules->file.perms) {  in unpack_profile()
1013 			error = aa_compat_map_file(&rules->file);  in unpack_profile()
1019 	} else if (rules->policy.dfa &&  in unpack_profile()
1020 		   rules->policy.start[AA_CLASS_FILE]) {  in unpack_profile()
1021 		rules->file.dfa = aa_get_dfa(rules->policy.dfa);  in unpack_profile()
1022 		rules->file.start[AA_CLASS_FILE] = rules->policy.start[AA_CLASS_FILE];  in unpack_profile()
1023 		rules->file.perms = kcalloc(rules->policy.size,  in unpack_profile()
1026 		if (!rules->file.perms)  in unpack_profile()
1028 		memcpy(rules->file.perms, rules->policy.perms,  in unpack_profile()
1029 		       rules->policy.size * sizeof(struct aa_perms));  in unpack_profile()
1030 		rules->file.size = rules->policy.size;  in unpack_profile()
1032 		rules->file.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
1033 		rules->file.perms = kcalloc(2, sizeof(struct aa_perms),  in unpack_profile()
1035 		if (!rules->file.perms)  in unpack_profile()
1037 		rules->file.size = 2;  in unpack_profile()
1239 	struct aa_ruleset *rules = list_first_entry(&profile->rules,  in verify_profile()  local
1240 						    typeof(*rules), list);  in verify_profile()
1241 	if (!rules)  in verify_profile()
1244 	if ((rules->file.dfa && !verify_dfa_accept_index(rules->file.dfa,  in verify_profile()
1245 							 rules->file.size)) ||  in verify_profile()
1246 	    (rules->policy.dfa &&  in verify_profile()
1247 	     !verify_dfa_accept_index(rules->policy.dfa, rules->policy.size))) {  in verify_profile()
1253 	if (!verify_perms(&rules->file)) {  in verify_profile()
1258 	if (!verify_perms(&rules->policy)) {  in verify_profile()