Skip to contentSkip to conversation

libsepol: fix segfault for missing initial sid context

PATCH New Christopher J. PeBenito 1 participant 1 message Jun 12, 2012 SELinux security module

lore
Share & tools
lore
#0 lore raw

cover libsepol: fix segfault for missing initial sid context

In working with the seandroid policy, I found that if you are missing an initial sid labeling statement, e.g.

sid devnull u:object_r:null_device:s0

the compiler will segfault during expand in context_copy(). This patch set moves the context_copy() to after the switch block in ocontext_copy_*(), and then adds a check in the initial sid case of the switch.

Signature · 9 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe selinux" without quotes as the message.