James Carter 410634d650 libsepol/cil: Verify neither child nor parent in a bounds is an attribute ... Nicolas Iooss found while fuzzing secilc with AFL that using an attribute as a child in a typebounds statement will cause a segfault. This happens because the child datum is assumed to be part of a cil_type struct when it is really part of a cil_typeattribute struct. The check to verify that it is a type and not an attribute comes after it is used. This bug effects user and role bounds as well because they do not check whether a datum refers to an attribute or not. Add checks to verify that neither the child nor the parent datum refer to an attribute before using them in user, role, and type bounds. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>		2016-10-19 10:08:15 -04:00
..
include/cil
src	libsepol/cil: Verify neither child nor parent in a bounds is an attribute	2016-10-19 10:08:15 -04:00
test	libsepol: Move secilc out of libsepol	2015-03-31 12:31:38 -04:00
.gitignore