audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() directly
authorRichard Guy Briggs <[email protected]>
Fri, 28 Feb 2014 19:30:45 +0000 (14:30 -0500)
committerEric Paris <[email protected]>
Tue, 23 Sep 2014 20:21:26 +0000 (16:21 -0400)
Since every arch should have syscall_get_arch() defined, stop using the
function argument and just collect this ourselves.  We do not drop the
argument as fixing some code paths (in assembly) to not pass this first
argument is non-trivial.  The argument will be dropped when that is
fixed.

Signed-off-by: Richard Guy Briggs <[email protected]>
Signed-off-by: Eric Paris <[email protected]>
kernel/auditsc.c

index 21eae3c05ec09e4ce5e0d302f8a59d0475407aa9..dff2a23256553ef8ae169ad964c1d1baa7af94ac 100644 (file)
@@ -1536,7 +1536,7 @@ void __audit_syscall_entry(int arch, int major,
        if (!audit_enabled)
                return;
 
-       context->arch       = arch;
+       context->arch       = syscall_get_arch();
        context->major      = major;
        context->argv[0]    = a1;
        context->argv[1]    = a2;