https://github.com/torvalds/linux
Revision 6e8c751e07b34d73069e9333f67fbe5ffe31ec3a authored by Chad Sellers on 06 October 2006, 20:09:52 UTC, committed by David S. Miller on 12 October 2006, 06:59:41 UTC
This patch fixes two bugs in policydb_destroy. Two list pointers
(policydb.ocontexts[i] and policydb.genfs) were not being reset to NULL when
the lists they pointed to were being freed. This caused a problem when the
initial policy load failed, as the policydb being destroyed was not a
temporary new policydb that was thrown away, but rather was the global
(active) policydb. Consequently, later functions, particularly
sys_bind->selinux_socket_bind->security_node_sid and
do_rw_proc->selinux_sysctl->selinux_proc_get_sid->security_genfs_sid tried
to dereference memory that had previously been freed.

Signed-off-by: Chad Sellers <csellers@tresys.com>
Signed-off-by: James Morris <jmorris@namei.org>
1 parent 3bccfbc
History
Tip revision: 6e8c751e07b34d73069e9333f67fbe5ffe31ec3a authored by Chad Sellers on 06 October 2006, 20:09:52 UTC
SELinux: Bug fix in polidydb_destroy
Tip revision: 6e8c751
File Mode Size
Documentation
arch
block
crypto
drivers
fs
include
init
ipc
kernel
lib
mm
net
scripts
security
sound
usr
.gitignore -rw-r--r-- 542 bytes
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 88.2 KB
Kbuild -rw-r--r-- 1.2 KB
MAINTAINERS -rw-r--r-- 73.2 KB
Makefile -rw-r--r-- 48.9 KB
README -rw-r--r-- 16.2 KB
REPORTING-BUGS -rw-r--r-- 3.0 KB

README

back to top