)]}'
{
  "commit": "cea78dc4ca044e9666e8f5d797ec50ab85253e49",
  "tree": "3aa8608428774602db2550cd684bef26a9812b5d",
  "parents": [
    "bdd581c1439339f1d3e8446b83e0f1beaef294e9"
  ],
  "author": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Mon Jun 09 15:43:12 2008 -0400"
  },
  "committer": {
    "name": "James Morris",
    "email": "jmorris@namei.org",
    "time": "Mon Jul 14 15:01:58 2008 +1000"
  },
  "message": "SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av\n\nThe class_to_string array is referenced by tclass.  My code mistakenly\nwas using tclass - 1.  If the proceeding class is a userspace class\nrather than kernel class this may cause a denial/EINVAL even if unknown\nhandling is set to allow.  The bug shouldn\u0027t be allowing excess\nprivileges since those are given based on the contents of another array\nwhich should be correctly referenced.\n\nAt this point in time its pretty unlikely this is going to cause\nproblems.  The most recently added kernel classes which could be\naffected are association, dccp_socket, and peer.  Its pretty unlikely\nany policy with handle_unknown\u003dallow doesn\u0027t have association and\ndccp_socket undefined (they\u0027ve been around longer than unknown handling)\nand peer is conditionalized on a policy cap which should only be defined\nif that class exists in policy.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nAcked-by:  Stephen Smalley \u003csds@tycho.nsa.gov\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d06df335ee7be1337b99708da2b963313ef6b754",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/services.c",
      "new_id": "f26a8cad06e746947ee31ca1353f5254ac6ed704",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/services.c"
    }
  ]
}