a7604ba7eb
There are three improvements. When calling cil_find_matching_avrule_in_ast(), one parameter specifies whether to return a match of the exact same (not a duplicate) rule. Since the target passed in is created and not actually in the tree by making this parameter true an extra comparison can be avoided. Currently, when printing a bounds violation trace, every match except for the last one has only the parents of the rule printed. Only the last rule has both its parents and the actual rule printed. Now the parents and rule are printed for each match. This has the additional benefit that if a match is not found (there should always be a match) a seg fault will not occur. To reduce the amount of error reporting, only print a trace of a matching rule if it is different from the previous one. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov> |
||
|---|---|---|
| .. | ||
| include/cil | ||
| src | ||
| test | ||
| .gitignore | ||