audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() directly
authorRichard Guy Briggs <rgb@redhat.com>
Fri, 28 Feb 2014 19:30:45 +0000 (14:30 -0500)
committerEric Paris <eparis@redhat.com>
Tue, 23 Sep 2014 20:21:26 +0000 (16:21 -0400)
Since every arch should have syscall_get_arch() defined, stop using the
function argument and just collect this ourselves.  We do not drop the
argument as fixing some code paths (in assembly) to not pass this first
argument is non-trivial.  The argument will be dropped when that is
fixed.

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/auditsc.c

index 21eae3c..dff2a23 100644 (file)
@@ -1536,7 +1536,7 @@ void __audit_syscall_entry(int arch, int major,
        if (!audit_enabled)
                return;
 
-       context->arch       = arch;
+       context->arch       = syscall_get_arch();
        context->major      = major;
        context->argv[0]    = a1;
        context->argv[1]    = a2;