Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aedbb45f authored by Stephen Smalley's avatar Stephen Smalley Committed by Greg Kroah-Hartman
Browse files

selinux: fix GPF on invalid policy 



commit 5b0e7310a2a33c06edc7eb81ffc521af9b2c5610 upstream.

levdatum->level can be NULL if we encounter an error while loading
the policy during sens_read prior to initializing it.  Make sure
sens_destroy handles that case correctly.

Reported-by: default avatar <syzbot+6664500f0f18f07a5c0e@syzkaller.appspotmail.com>
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent c6c0e52a

security/selinux/ss/policydb.c

+2 −1
Original line number Diff line number Diff line
@@ -726,6 +726,7 @@ static int sens_destroy(void *key, void *datum, void *p) 
	kfree(key);

	if (datum) {

		levdatum = datum;

		if (levdatum->level)

			ebitmap_destroy(&levdatum->level->cat);

		kfree(levdatum->level);

	}