audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() directly
authorRichard Guy Briggs <rgb@redhat.com>
Fri, 28 Feb 2014 19:30:45 +0000 (14:30 -0500)
committerEric Paris <eparis@redhat.com>
Tue, 23 Sep 2014 20:21:26 +0000 (16:21 -0400)
Since every arch should have syscall_get_arch() defined, stop using the
function argument and just collect this ourselves.  We do not drop the
argument as fixing some code paths (in assembly) to not pass this first
argument is non-trivial.  The argument will be dropped when that is
fixed.

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/auditsc.c

index 21eae3c05ec09e4ce5e0d302f8a59d0475407aa9..dff2a23256553ef8ae169ad964c1d1baa7af94ac 100644 (file)
@@ -1536,7 +1536,7 @@ void __audit_syscall_entry(int arch, int major,
        if (!audit_enabled)
                return;
 
-       context->arch       = arch;
+       context->arch       = syscall_get_arch();
        context->major      = major;
        context->argv[0]    = a1;
        context->argv[1]    = a2;