James Carter f0823bbbb5 libsepol/cil: Do not resolve names to declarations in abstract blocks ... Since abstract blocks will not appear in the final policy, do not resolve names to a declaration inside one. When resolving blockabstract rules, they must be collected in a list and processed at the end of the pass because if a parent block is marked as abstract, then a blockabstract rule for a sub-block will fail to resolve. Found by oss-fuzz (#42981) Signed-off-by: James Carter <jwcart2@gmail.com>		2022-02-11 14:05:19 -05:00
..
cil	libsepol/cil: Do not resolve names to declarations in abstract blocks	2022-02-11 14:05:19 -05:00
fuzz	libsepol: add libfuzz based fuzzer for reading binary policies	2021-12-15 12:48:28 -05:00
include	libsepol: avoid implicit conversions	2021-07-13 21:01:07 +02:00
man	selinux: Update manpages after removing legacy boolean and user code	2019-07-29 23:46:47 +02:00
src	libsepol: do not add gaps to string list	2022-02-07 11:14:53 -05:00
tests	ci: run the tests under ASan/UBsan on GHActions	2022-01-06 10:34:33 -05:00
utils	libsepol: build: follow standard semantics for DESTDIR and PREFIX	2018-02-14 15:59:36 +01:00
.gitignore
COPYING
Makefile
VERSION	Update VERSIONs to 3.3 for release.	2021-10-21 16:31:23 +02:00