]> git.itanic.dy.fi Git - linux-stable/commit
selinux: fix GPF on invalid policy
authorStephen Smalley <sds@tycho.nsa.gov>
Wed, 9 Jan 2019 15:55:10 +0000 (10:55 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 23 Jan 2019 07:10:56 +0000 (08:10 +0100)
commitaedbb45f8f6fa41cd2146221c98e2e7d9a3fee05
tree837376c781b1f13304ba65c78fc989c33b12312a
parentc6c0e52ab3fbe3915066eca7f072ee5977957eb5
selinux: fix GPF on invalid policy

commit 5b0e7310a2a33c06edc7eb81ffc521af9b2c5610 upstream.

levdatum->level can be NULL if we encounter an error while loading
the policy during sens_read prior to initializing it.  Make sure
sens_destroy handles that case correctly.

Reported-by: syzbot+6664500f0f18f07a5c0e@syzkaller.appspotmail.com
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/selinux/ss/policydb.c