libselinux segfault, if file_contexts file does not exist

libselinux segfault, if file_contexts file does not exist

[Daniel J Walsh]

[-- Attachment #1: Type: text/plain, Size: 350 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


https://bugzilla.redhat.com/show_bug.cgi?id=308851
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFG+/CWrlYvE4MpobMRAi7+AKCzBc906xJDXvve+tvemuBY8tFe4QCgk78j
CZzAvmikWfld43QZSJbdIRA=
=D2ho
-----END PGP SIGNATURE-----

[-- Attachment #2: diff --]
[-- Type: text/plain, Size: 484 bytes --]

diff --exclude-from=exclude -N -u -r nsalibselinux/src/matchpathcon.c libselinux-2.0.35/src/matchpathcon.c
--- nsalibselinux/src/matchpathcon.c	2007-09-18 16:27:25.000000000 -0400
+++ libselinux-2.0.35/src/matchpathcon.c	2007-09-27 13:50:55.000000000 -0400
@@ -305,8 +306,10 @@
 
 void matchpathcon_fini(void)
 {
-	selabel_close(hnd);
-	hnd = NULL;
+	if (hnd) {
+		selabel_close(hnd);
+		hnd = NULL;
+	}
 }
 
 int matchpathcon(const char *name, mode_t mode, security_context_t * con)

[-- Attachment #3: diff.sig --]
[-- Type: application/octet-stream, Size: 65 bytes --]

Re: libselinux segfault, if file_contexts file does not exist

[Eamon Walsh]

Daniel J Walsh wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=308851
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> 
> iD8DBQFG+/CWrlYvE4MpobMRAi7+AKCzBc906xJDXvve+tvemuBY8tFe4QCgk78j
> CZzAvmikWfld43QZSJbdIRA=
> =D2ho
> -----END PGP SIGNATURE-----
> 

Thanks, applied.

-- 
Eamon Walsh <ewalsh@tycho.nsa.gov>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.