selinux/checkpolicy/test
James Carter 90db06c524 libsepol: Use a dynamic buffer in sepol_av_to_string()
In the internal function sepol_av_to_string(), use a dynamically
allocated buffer for the permission names of an access vector instead
of a fixed static buffer to support very long permission names.

Update the internal users of sepol_av_to_string() to free the buffer.

The exported function sepol_perm_to_string() is just a wrapper to
the internal function. To avoid changing the behavior of this function,
use a static buffer and copy the resulting string from the internal
function. If the string is too long for the buffer or there was an
error in creating the string, return a string indicating the error.

All of the changes to the internal function and users was the work
of Christian Göttsche <cgzones@googlemail.com>.

Reported-by: oss-fuzz (issue 64832, 64933)
Suggested-by: Christian Göttsche <cgzones@googlemail.com>
Signed-off-by: James Carter <jwcart2@gmail.com>
2024-03-04 09:45:41 -05:00
..
.gitignore Repo: update .gitignore 2011-08-02 13:31:51 -04:00
Makefile Add CPPFLAGS to Makefiles 2023-12-06 13:35:32 -05:00
dismod.c libsepol: Use a dynamic buffer in sepol_av_to_string() 2024-03-04 09:45:41 -05:00
dispol.c libsepol: Use a dynamic buffer in sepol_av_to_string() 2024-03-04 09:45:41 -05:00