alistair23-linux/security/selinux/ss
Ondrej Mosnacek 6a1afffb08 selinux: fix NULL dereference in policydb_destroy()
The conversion to kvmalloc() forgot to account for the possibility that
p->type_attr_map_array might be null in policydb_destroy().

Fix this by destroying its contents only if it is not NULL.

Also make sure ebitmap_init() is called on all entries before
policydb_destroy() can be called. Right now this is a no-op, because
both kvcalloc() and ebitmap_init() just zero out the whole struct, but
let's rather not rely on a specific implementation.

Reported-by: syzbot+a57b2aff60832666fc28@syzkaller.appspotmail.com
Fixes: acdf52d97f ("selinux: convert to kvmalloc")
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2019-03-18 12:19:48 -04:00
..
avtab.c selinux: convert to kvmalloc 2019-03-12 10:04:02 -07:00
avtab.h selinux: convert to kvmalloc 2019-03-12 10:04:02 -07:00
conditional.c selinux: convert to kvmalloc 2019-03-12 10:04:02 -07:00
conditional.h
constraint.h
context.h
ebitmap.c selinux: Cleanup printk logging in ebitmap 2018-06-19 11:47:46 -04:00
ebitmap.h selinux: wrap global selinux state 2018-03-01 18:48:02 -05:00
hashtab.c selinux: wrap global selinux state 2018-03-01 18:48:02 -05:00
hashtab.h selinux: wrap global selinux state 2018-03-01 18:48:02 -05:00
mls.c selinux/stable-4.21 PR 20181224 2018-12-27 12:01:58 -08:00
mls.h selinux: overhaul sidtab to fix bug and improve performance 2018-12-05 16:12:32 -05:00
mls_types.h
policydb.c selinux: fix NULL dereference in policydb_destroy() 2019-03-18 12:19:48 -04:00
policydb.h selinux: convert to kvmalloc 2019-03-12 10:04:02 -07:00
services.c selinux: convert to kvmalloc 2019-03-12 10:04:02 -07:00
services.h selinux: use separate table for initial SID lookup 2018-12-05 15:36:12 -05:00
sidtab.c selinux: overhaul sidtab to fix bug and improve performance 2018-12-05 16:12:32 -05:00
sidtab.h selinux: overhaul sidtab to fix bug and improve performance 2018-12-05 16:12:32 -05:00
status.c selinux: rename the {is,set}_enforcing() functions 2018-03-02 14:18:55 -05:00
symtab.c
symtab.h