Vratislav Bendel 70caa32e6d selinux: fix double free of cond_list on error paths ... commit 186edf7e36 upstream. On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop. Also consistently reset the cond_list pointer to NULL after freeing. Cc: stable@vger.kernel.org Signed-off-by: Vratislav Bendel <vbendel@redhat.com> [PM: fix line lengths in the description] Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-08 18:34:02 +01:00
..
apparmor	apparmor: fix error check	2021-11-18 19:16:58 +01:00
bpf	…
integrity	ima: fix deadlock when traversing "ima_default_rules".	2021-11-18 19:16:31 +01:00
keys	ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring	2021-10-20 10:34:20 -05:00
landlock	…
loadpin	…
lockdown	…
safesetid	…
selinux	selinux: fix double free of cond_list on error paths	2022-02-08 18:34:02 +01:00
smack	smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi	2021-11-18 19:16:39 +01:00
tomoyo	tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()	2022-01-05 12:42:33 +01:00
yama	…
Kconfig	fortify: Explicitly disable Clang support	2021-11-21 13:44:13 +01:00
Kconfig.hardening	…
Makefile	security: remove unneeded subdir-$(CONFIG_...)	2021-09-03 08:17:20 +09:00
commoncap.c	…
device_cgroup.c	…
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	binder: use cred instead of task for selinux checks	2021-11-12 15:05:48 +01:00