UBUNTU: SAUCE: AppArmor: Fix unpack of network tables.

[linux-flexiantxendom0-natty.git] / security / apparmor / policy_unpack.c

diff --git a/security/apparmor/policy_unpack.c b/security/apparmor/policy_unpack.c
index c2b6225..d8ab6d3 100644 (file)
--- a/security/apparmor/policy_unpack.c
+++ b/security/apparmor/policy_unpack.c
@@ -580,7 +580,7 @@ static struct aa_profile *unpack_profile(struct aa_ext *e)
                        /* discard extraneous rules that this kernel will
                         * never request
                         */
-                       if (i > AF_MAX) {
+                       if (i >= AF_MAX) {
                                u16 tmp;
                                if (!unpack_u16(e, &tmp, NULL) ||
                                    !unpack_u16(e, &tmp, NULL) ||