Skip to content

libsepol: fix segfault for missing initial sid context

Christopher J. PeBenito selinux 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest0 of 2 patches 0 repliesNew

Patches in v1 No applies recorded yet

None of the 2 patches the cover letter announces are in this archive.

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/2] libsepol: fix segfault for missing initial sid context

In working with the seandroid policy, I found that if you are missing an initial sid labeling statement, e.g.

sid devnull u:object_r:null_device:s0

the compiler will segfault during expand in context_copy(). This patch set moves the context_copy() to after the switch block in ocontext_copy_*(), and then adds a check in the initial sid case of the switch.

Signature · 9 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe selinux" without quotes as the message.