Eric Biggers <ebiggers3@gmail.com> wrote:> + if (test_bit(KEY_FLAG_NEGATIVE, &key->flags)) {> + ret = -ENOKEY;> + goto error2;> + }It might be better to do this check in key_validate(). Also, it shouldperhaps take the error from key->reject_error.David