RepoMirrors
/
selinux
mirror of https://github.com/SELinuxProject/selinux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,329 Commits 4 Branches 681 Tags 21 MiB
C 74.6%
Python 16.2%
Roff 5.2%
SWIG 1.1%
Makefile 1.1%
Other 1.8%
Go to file
Nicolas Iooss c56bb631c4 libselinux: label_file: fix memory management in store_stem() 
If store_stem() fails to expand the memory allocated on data->stem_arr,
some things go wrong:
* the memory referenced by "buf" is leaked,
* data->alloc_stems has been increased without data->stem_arr having
  been expanded. So the next time store_stem() is called, the function
  will behave as if the buffer holds enough space, and will write data
  after the end of data->stem_arr.

The first issue is being spotted by clang's static analyzer, which warns
about leaking variable "stem" in find_stem_from_spec() (this function
calls store_stem()).

This both issues by freeing buf when realloc(data->stem_arr) fails, and
by not increasing data->alloc_stems when this happens.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
 		2018-04-17 13:55:57 -07:00
checkpolicy Resolve conflicts in expandattribute. 2018-03-26 12:29:37 -07:00
dbus dbus: build: follow standard semantics for DESTDIR and PREFIX 2018-02-14 20:02:03 +01:00
gui gui/fcontextPage: Set default object class in addDialog 2018-03-01 09:42:18 -05:00
libselinux libselinux: label_file: fix memory management in store_stem() 2018-04-17 13:55:57 -07:00
libsemanage libsemanage: do not change file mode of seusers and users_extra 2018-04-13 16:21:26 -04:00
libsepol libsepol: ensure the level context is not empty 2018-04-17 13:55:57 -07:00
mcstrans mcstrans: build: follow standard semantics for DESTDIR and PREFIX 2018-02-14 15:59:38 +01:00
policycoreutils policycoreutils/semodule: Allow enabling/disabling multiple modules at once 2018-03-26 10:19:51 -04:00
python python/sepolgen: Try to translate SELinux contexts to raw 2018-04-13 13:41:46 -04:00
restorecond restorecond: build: follow standard semantics for DESTDIR and PREFIX 2018-02-14 20:02:02 +01:00
sandbox sandbox: build: follow standard semantics for DESTDIR and PREFIX 2018-02-14 20:02:02 +01:00
scripts Fix release script 2016-11-16 11:19:51 -05:00
secilc selinux: Add support for the SCTP portcon keyword 2018-03-19 12:34:29 -04:00
semodule-utils semodule-utils/semodule_package: fix semodule_unpackage man page 2018-02-26 09:52:02 -05:00
.gitignore restorecond: Add gitignore 2016-11-16 11:20:05 -05:00
.travis.yml libselinux,libsemanage: Replace PYSITEDIR with PYTHONLIBDIR 2018-03-17 09:03:33 +01:00
CleanSpec.mk
…
Makefile build: setup buildpaths if DESTDIR is specified 2018-02-14 20:02:03 +01:00
README libsepol: build: follow standard semantics for DESTDIR and PREFIX 2018-02-14 15:59:36 +01:00

README 

Please submit all bug reports and patches to selinux@tycho.nsa.gov.
Subscribe via selinux-join@tycho.nsa.gov.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig xmlto redhat-rpm-config

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.

To install libsepol on macOS (mainly for policy analysis):
cd libsepol; make PREFIX=/usr/local install

This requires GNU coreutils (brew install coreutils).