[GIT PULL] SELinux fixes for v5.8 (#1)

Paul Moore paul at paul-moore.com
Sun Jun 21 20:54:16 UTC 2020


Hi Linus,

Three small patches to fix problems in the SELinux code, all found via
clang.  Two patches fix potential double-free conditions and one fixes
an undefined return value.  All are pretty easy to understand and the
commit descriptions are reasonably good so I don't think there is a
need to go into more detail here.  Please merge these for v5.8-rcX.

Thanks,
-Paul

--
The following changes since commit fe5a90b8c14914397a3bb0c214d142103c1ba3bf:

 selinux: netlabel: Remove unused inline function
   (2020-05-12 20:16:33 -0400)

are available in the Git repository at:

 git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
   tags/selinux-pr-20200621

for you to fetch changes up to 8231b0b9c322c894594fb42eb0eb9f93544a6acc:

 selinux: fix undefined return of cond_evaluate_expr
   (2020-06-17 17:36:40 -0400)

----------------------------------------------------------------
selinux/stable-5.8 PR 20200621

----------------------------------------------------------------
Tom Rix (3):
     selinux: fix double free
     selinux: fix a double free in cond_read_node()/cond_read_list()
     selinux: fix undefined return of cond_evaluate_expr

security/selinux/ss/conditional.c | 21 ++++++++-------------
security/selinux/ss/services.c    |  4 ++++
2 files changed, 12 insertions(+), 13 deletions(-)

-- 
paul moore
www.paul-moore.com



More information about the Linux-security-module-archive mailing list