Nicolas Iooss 228c06d97a libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit ... OSS-Fuzz found a heap buffer overflow (out-of-bound reads) when the CIL compiler tries to report a recursive blockinherit with an optional block: $ echo '(block b (optional o (blockinherit b)))' > tmp.cil $ secilc tmp.cil Segmentation fault (core dumped) This is because cil_print_recursive_blockinherit() assumes that all nodes are either CIL_BLOCK or CIL_BLOCKINHERIT. Add support for other block kinds, using cil_node_to_string() to show them. Fixes: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28462 Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>		2021-01-05 10:33:55 -05:00
..
cil	libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit	2021-01-05 10:33:55 -05:00
include	libsepol: Drop deprecated functions	2020-10-19 22:11:39 +02:00
man	selinux: Update manpages after removing legacy boolean and user code	2019-07-29 23:46:47 +02:00
src	libsepol: free memory when realloc() fails	2020-11-12 21:24:06 +01:00
tests	libsepol/tests: drop ncurses dependency	2020-05-04 10:31:44 +02:00
utils	libsepol: build: follow standard semantics for DESTDIR and PREFIX	2018-02-14 15:59:36 +01:00
.gitignore
COPYING
Makefile
VERSION	Update VERSIONs and Python bindings version to 3.1 for release	2020-07-10 17:17:15 +02:00