kernel/security/smack/smackfs.c
.. .. @@ -895,7 +895,7 @@ 895 895 } 896 896 897 897 ret = sscanf(rule, "%d", &catlen); 898 - if (ret != 1 || catlen > SMACK_CIPSO_MAXCATNUM)898 + if (ret != 1 || catlen < 0 || catlen > SMACK_CIPSO_MAXCATNUM)899 899 goto out; 900 900 901 901 if (format == SMK_FIXED24_FMT &&