kernel-ark/security/selinux/ss
Chad Sellers 6e8c751e07 SELinux: Bug fix in polidydb_destroy
This patch fixes two bugs in policydb_destroy. Two list pointers
(policydb.ocontexts[i] and policydb.genfs) were not being reset to NULL when
the lists they pointed to were being freed. This caused a problem when the
initial policy load failed, as the policydb being destroyed was not a
temporary new policydb that was thrown away, but rather was the global
(active) policydb. Consequently, later functions, particularly
sys_bind->selinux_socket_bind->security_node_sid and
do_rw_proc->selinux_sysctl->selinux_proc_get_sid->security_genfs_sid tried
to dereference memory that had previously been freed.

Signed-off-by: Chad Sellers <csellers@tresys.com>
Signed-off-by: James Morris <jmorris@namei.org>
2006-10-11 23:59:41 -07:00
..
avtab.c
avtab.h
conditional.c
conditional.h
constraint.h
context.h
ebitmap.c [NetLabel]: Cleanup ebitmap_import() 2006-09-22 15:18:37 -07:00
ebitmap.h [NetLabel]: SELinux support 2006-09-22 14:53:36 -07:00
hashtab.c
hashtab.h
Makefile
mls_types.h
mls.c [PATCH] selinux: add support for range transitions on object classes 2006-09-26 08:48:52 -07:00
mls.h [NetLabel]: SELinux support 2006-09-22 14:53:36 -07:00
policydb.c SELinux: Bug fix in polidydb_destroy 2006-10-11 23:59:41 -07:00
policydb.h [PATCH] selinux: add support for range transitions on object classes 2006-09-26 08:48:52 -07:00
services.c NetLabel: use SECINITSID_UNLABELED for a base SID 2006-10-11 23:59:32 -07:00
services.h
sidtab.c
sidtab.h
symtab.c
symtab.h