selinux/libsepol
Christian Göttsche 589e2dba72 libsepol: check scope permissions refer to valid class
Validate that the permission maps in the scope index refer to a valid
class datum.  Otherwise since commit 52e5c306 ("libsepol: move unchanged
data out of loop") this can lead to a NULL dereference in the class
existence check during linking.

Reported-by: oss-fuzz (issue 69655)
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
2024-06-21 09:29:50 -04:00
..
cil libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772) 2024-05-01 16:50:31 -04:00
fuzz libsepol/fuzz: handle empty and non kernel policies 2023-12-06 13:32:50 -05:00
include libsepol: rework permission enabled check 2024-06-14 09:10:49 -04:00
man Do not automatically install Russian translations 2023-08-16 13:33:47 -04:00
src libsepol: check scope permissions refer to valid class 2024-06-21 09:29:50 -04:00
tests libsepol/tests: Update the order of neverallow test results 2023-11-21 08:55:45 -05:00
utils libsepol/utils: improve wording 2022-07-06 15:57:24 -04:00
.gitignore libsepol: add policy utilities 2022-04-12 13:09:19 -04:00
LICENSE docs: provide a top level LICENSE file 2022-10-05 08:20:38 -04:00
Makefile libsepol: build cil into libsepol 2014-08-26 08:03:31 -04:00
VERSION Update VERSIONs to 3.7-rc3 for release. 2024-06-20 14:49:08 +02:00