565 static bool unpack_secmark(struct aa_ext *e, struct aa_ruleset *rules)  in unpack_secmark()  argument
575 		rules->secmark = kcalloc(size, sizeof(struct aa_secmark),  in unpack_secmark()
577 		if (!rules->secmark)  in unpack_secmark()
580 		rules->secmark_count = size;  in unpack_secmark()
583 			if (!unpack_u8(e, &rules->secmark[i].audit, NULL))  in unpack_secmark()
585 			if (!unpack_u8(e, &rules->secmark[i].deny, NULL))  in unpack_secmark()
587 			if (!aa_unpack_strdup(e, &rules->secmark[i].label, NULL))  in unpack_secmark()
599 	if (rules->secmark) {  in unpack_secmark()
601 			kfree(rules->secmark[i].label);  in unpack_secmark()
602 		kfree(rules->secmark);  in unpack_secmark()
603 		rules->secmark_count = 0;  in unpack_secmark()
604 		rules->secmark = NULL;  in unpack_secmark()
611 static bool unpack_rlimits(struct aa_ext *e, struct aa_ruleset *rules)  in unpack_rlimits()  argument
622 		rules->rlimits.mask = tmp;  in unpack_rlimits()
632 			rules->rlimits.limits[a].rlim_max = tmp2;  in unpack_rlimits()
804 	struct aa_ruleset *rules;  in unpack_profile()  local
847 	rules = list_first_entry(&profile->rules, typeof(*rules), list);  in unpack_profile()
930 	if (!aa_unpack_cap_low(e, &rules->caps.allow, NULL))  in unpack_profile()
932 	if (!aa_unpack_cap_low(e, &rules->caps.audit, NULL))  in unpack_profile()
934 	if (!aa_unpack_cap_low(e, &rules->caps.quiet, NULL))  in unpack_profile()
942 		if (!aa_unpack_cap_high(e, &rules->caps.allow, NULL))  in unpack_profile()
944 		if (!aa_unpack_cap_high(e, &rules->caps.audit, NULL))  in unpack_profile()
946 		if (!aa_unpack_cap_high(e, &rules->caps.quiet, NULL))  in unpack_profile()
957 		if (!aa_unpack_cap_low(e, &rules->caps.extended, NULL))  in unpack_profile()
959 		if (!aa_unpack_cap_high(e, &rules->caps.extended, NULL))  in unpack_profile()
970 	if (!unpack_rlimits(e, rules)) {  in unpack_profile()
975 	if (!unpack_secmark(e, rules)) {  in unpack_profile()
976 		info = "failed to unpack profile secmark rules";  in unpack_profile()
983 		error = unpack_pdb(e, &rules->policy, true, false,  in unpack_profile()
988 		if (aa_dfa_next(rules->policy.dfa, rules->policy.start[0],  in unpack_profile()
990 			rules->policy.start[AA_CLASS_FILE] =  in unpack_profile()
991 			  aa_dfa_next(rules->policy.dfa,  in unpack_profile()
992 				      rules->policy.start[0],  in unpack_profile()
996 		if (!rules->policy.perms) {  in unpack_profile()
997 			error = aa_compat_map_policy(&rules->policy,  in unpack_profile()
1005 		rules->policy.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
1006 		rules->policy.perms = kcalloc(2, sizeof(struct aa_perms),  in unpack_profile()
1008 		if (!rules->policy.perms)  in unpack_profile()
1010 		rules->policy.size = 2;  in unpack_profile()
1012 	/* get file rules */  in unpack_profile()
1013 	error = unpack_pdb(e, &rules->file, false, true, &info);  in unpack_profile()
1016 	} else if (rules->file.dfa) {  in unpack_profile()
1017 		if (!rules->file.perms) {  in unpack_profile()
1018 			error = aa_compat_map_file(&rules->file);  in unpack_profile()
1024 	} else if (rules->policy.dfa &&  in unpack_profile()
1025 		   rules->policy.start[AA_CLASS_FILE]) {  in unpack_profile()
1026 		rules->file.dfa = aa_get_dfa(rules->policy.dfa);  in unpack_profile()
1027 		rules->file.start[AA_CLASS_FILE] = rules->policy.start[AA_CLASS_FILE];  in unpack_profile()
1028 		rules->file.perms = kcalloc(rules->policy.size,  in unpack_profile()
1031 		if (!rules->file.perms)  in unpack_profile()
1033 		memcpy(rules->file.perms, rules->policy.perms,  in unpack_profile()
1034 		       rules->policy.size * sizeof(struct aa_perms));  in unpack_profile()
1035 		rules->file.size = rules->policy.size;  in unpack_profile()
1037 		rules->file.dfa = aa_get_dfa(nulldfa);  in unpack_profile()
1038 		rules->file.perms = kcalloc(2, sizeof(struct aa_perms),  in unpack_profile()
1040 		if (!rules->file.perms)  in unpack_profile()
1042 		rules->file.size = 2;  in unpack_profile()
1245 	struct aa_ruleset *rules = list_first_entry(&profile->rules,  in verify_profile()  local
1246 						    typeof(*rules), list);  in verify_profile()
1247 	if (!rules)  in verify_profile()
1250 	if ((rules->file.dfa && !verify_dfa_accept_index(rules->file.dfa,  in verify_profile()
1251 							 rules->file.size)) ||  in verify_profile()
1252 	    (rules->policy.dfa &&  in verify_profile()
1253 	     !verify_dfa_accept_index(rules->policy.dfa, rules->policy.size))) {  in verify_profile()
1259 	if (!verify_perms(&rules->file)) {  in verify_profile()
1264 	if (!verify_perms(&rules->policy)) {  in verify_profile()