From a92557ddfffc8ad1578fe9a3f03c3fca4f8f038b Mon Sep 17 00:00:00 2001
From: Eric Paris <eparis@redhat.com>
Date: Mon, 9 Jun 2008 15:43:12 -0400
Subject: [PATCH] --- yaml --- r: 99210 b: refs/heads/master c:
 cea78dc4ca044e9666e8f5d797ec50ab85253e49 h: refs/heads/master v: v3

---
 [refs]                               | 2 +-
 trunk/security/selinux/ss/services.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/[refs] b/[refs]
index 48ed2de75660..7ae1ea44faea 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: bdd581c1439339f1d3e8446b83e0f1beaef294e9
+refs/heads/master: cea78dc4ca044e9666e8f5d797ec50ab85253e49
diff --git a/trunk/security/selinux/ss/services.c b/trunk/security/selinux/ss/services.c
index d06df335ee7b..f26a8cad06e7 100644
--- a/trunk/security/selinux/ss/services.c
+++ b/trunk/security/selinux/ss/services.c
@@ -325,7 +325,7 @@ static int context_struct_compute_av(struct context *scontext,
 		goto inval_class;
 	if (unlikely(tclass > policydb.p_classes.nprim))
 		if (tclass > kdefs->cts_len ||
-		    !kdefs->class_to_string[tclass - 1] ||
+		    !kdefs->class_to_string[tclass] ||
 		    !policydb.allow_unknown)
 			goto inval_class;