RepoMirrors
/
selinux
mirror of https://github.com/SELinuxProject/selinux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

libsepol/cil: Return error when identifier declared as both type and attribute 

CIL allows a type to be redeclared when using the multiple declarations
option ("-m" or "--muliple-decls"), but make it an error for an identifier
to be declared as both a type and an attribute.

Change the error message so that it always gives the location and flavor
of both declarations. The flavors will be the same in all other cases,
but in this case they explain why there is an error even if multiple
declartions are allowed.

Fixes: Commit fafe4c212b ("libsepol: cil: Add ability to redeclare types[attributes]")
Reported-by: Topi Miettinen <toiwoton@gmail.com>
Signed-off-by: James Carter <jwcart2@gmail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
This commit is contained in:
James Carter 2020-05-26 14:50:58 -04:00 committed by Stephen Smalley
parent 7b1227b19e
commit a9ff2cc9a3
1 changed files with 16 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
libsepol/cil/src/cil_build_ast.c
View File

@ -87,7 +87,7 @@ exit:
* datum, given the new datum and the one already present in a given symtab.
*/
int cil_is_datum_multiple_decl(__attribute__((unused)) struct cil_symtab_datum *cur,
__attribute__((unused)) struct cil_symtab_datum *old,
struct cil_symtab_datum *old,
enum cil_flavor f)
{
int rc = CIL_FALSE;
@ -95,8 +95,12 @@ int cil_is_datum_multiple_decl(__attribute__((unused)) struct cil_symtab_datum *
switch (f) {
case CIL_TYPE:
case CIL_TYPEATTRIBUTE:
/* type and typeattribute statements insert empty datums, ret true */
if (!old || f != FLAVOR(old)) {
rc = CIL_FALSE;
} else {
/* type and typeattribute statements insert empty datums */
rc = CIL_TRUE;
}
break;
default:
break;
@ -126,19 +130,20 @@ int cil_gen_node(struct cil_db *db, struct cil_tree_node *ast_node, struct cil_s
if (symtab != NULL) {
rc = cil_symtab_insert(symtab, (hashtab_key_t)key, datum, ast_node);
if (rc == SEPOL_EEXIST) {
rc = cil_symtab_get_datum(symtab, (hashtab_key_t)key, &prev);
if (rc != SEPOL_OK) {
cil_log(CIL_ERR, "Re-declaration of %s %s, but previous declaration could not be found\n",cil_node_to_string(ast_node), key);
goto exit;
}
if (!db->multiple_decls ||
cil_symtab_get_datum(symtab, (hashtab_key_t)key, &prev) != SEPOL_OK ||
!cil_is_datum_multiple_decl(datum, prev, nflavor)) {
/* multiple_decls not ok, ret error */
struct cil_tree_node *node = NODE(prev);
cil_log(CIL_ERR, "Re-declaration of %s %s\n",
cil_node_to_string(ast_node), key);
if (cil_symtab_get_datum(symtab, key, &datum) == SEPOL_OK) {
if (sflavor == CIL_SYM_BLOCKS) {
struct cil_tree_node *node = datum->nodes->head->data;
cil_tree_log(node, CIL_ERR, "Previous declaration");
}
}
cil_tree_log(node, CIL_ERR, "Previous declaration of %s",
cil_node_to_string(node));
rc = SEPOL_ERR;
goto exit;
}
/* multiple_decls is enabled and works for this datum type, add node */
@ -169,7 +174,6 @@ int cil_gen_node(struct cil_db *db, struct cil_tree_node *ast_node, struct cil_s
return SEPOL_OK;
exit:
cil_log(CIL_ERR, "Failed to create node\n");
return rc;
}