]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
selinux: fix GPF on invalid policy
authorStephen Smalley <sds@tycho.nsa.gov>
Wed, 9 Jan 2019 15:55:10 +0000 (10:55 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 22 Jan 2019 20:40:35 +0000 (21:40 +0100)
commit5a79e71e0bc85045606a34641170c560362d8c84
tree6ddaa3f396c4ec67ba51e044c51923d9d72a40d2
parent4cc66cc4f81fb8b1d6e83548fa79005dcc93ee2a
selinux: fix GPF on invalid policy

commit 5b0e7310a2a33c06edc7eb81ffc521af9b2c5610 upstream.

levdatum->level can be NULL if we encounter an error while loading
the policy during sens_read prior to initializing it.  Make sure
sens_destroy handles that case correctly.

Reported-by: syzbot+6664500f0f18f07a5c0e@syzkaller.appspotmail.com
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/selinux/ss/policydb.c