* [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null.
@ 2015-12-09 20:47 Petr Lautrbach
2015-12-17 13:55 ` Steve Lawrence
0 siblings, 1 reply; 4+ messages in thread
From: Petr Lautrbach @ 2015-12-09 20:47 UTC (permalink / raw)
To: selinux
From: Dan Walsh <dwalsh@redhat.com>
Return errno EINVAL, to prevent segfault.
Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
---
libselinux/src/avc_sidtab.c | 5 +++++
libselinux/src/canonicalize_context.c | 5 +++++
libselinux/src/check_context.c | 5 +++++
libselinux/src/compute_av.c | 5 +++++
libselinux/src/compute_create.c | 5 +++++
libselinux/src/compute_member.c | 5 +++++
libselinux/src/compute_relabel.c | 5 +++++
libselinux/src/compute_user.c | 5 +++++
libselinux/src/fsetfilecon.c | 8 ++++++--
libselinux/src/lsetfilecon.c | 9 +++++++--
libselinux/src/setfilecon.c | 8 ++++++--
11 files changed, 59 insertions(+), 6 deletions(-)
diff --git a/libselinux/src/avc_sidtab.c b/libselinux/src/avc_sidtab.c
index 9669264..a46cfa7 100644
--- a/libselinux/src/avc_sidtab.c
+++ b/libselinux/src/avc_sidtab.c
@@ -81,6 +81,11 @@ sidtab_context_to_sid(struct sidtab *s,
int hvalue, rc = 0;
struct sidtab_node *cur;
+ if (! ctx) {
+ errno = EINVAL;
+ return -1;
+ }
+
*sid = NULL;
hvalue = sidtab_hash(ctx);
diff --git a/libselinux/src/canonicalize_context.c b/libselinux/src/canonicalize_context.c
index 7cf3139..9d8dc86 100644
--- a/libselinux/src/canonicalize_context.c
+++ b/libselinux/src/canonicalize_context.c
@@ -17,6 +17,11 @@ int security_canonicalize_context_raw(const char * con,
size_t size;
int fd, ret;
+ if (! con) {
+ errno = EINVAL;
+ return -1;
+ }
+
if (!selinux_mnt) {
errno = ENOENT;
return -1;
diff --git a/libselinux/src/check_context.c b/libselinux/src/check_context.c
index 52063fa..9637dd7 100644
--- a/libselinux/src/check_context.c
+++ b/libselinux/src/check_context.c
@@ -14,6 +14,11 @@ int security_check_context_raw(const char * con)
char path[PATH_MAX];
int fd, ret;
+ if (! con) {
+ errno = EINVAL;
+ return -1;
+ }
+
if (!selinux_mnt) {
errno = ENOENT;
return -1;
diff --git a/libselinux/src/compute_av.c b/libselinux/src/compute_av.c
index 937e5c3..e67b3d3 100644
--- a/libselinux/src/compute_av.c
+++ b/libselinux/src/compute_av.c
@@ -26,6 +26,11 @@ int security_compute_av_flags_raw(const char * scon,
return -1;
}
+ if ((! scon) || (! tcon)) {
+ errno = EINVAL;
+ return -1;
+ }
+
snprintf(path, sizeof path, "%s/access", selinux_mnt);
fd = open(path, O_RDWR);
if (fd < 0)
diff --git a/libselinux/src/compute_create.c b/libselinux/src/compute_create.c
index 9559d42..7de721a 100644
--- a/libselinux/src/compute_create.c
+++ b/libselinux/src/compute_create.c
@@ -64,6 +64,11 @@ int security_compute_create_name_raw(const char * scon,
return -1;
}
+ if ((! scon) || (! tcon)) {
+ errno = EINVAL;
+ return -1;
+ }
+
snprintf(path, sizeof path, "%s/create", selinux_mnt);
fd = open(path, O_RDWR);
if (fd < 0)
diff --git a/libselinux/src/compute_member.c b/libselinux/src/compute_member.c
index 1fc7e41..4ff2173 100644
--- a/libselinux/src/compute_member.c
+++ b/libselinux/src/compute_member.c
@@ -25,6 +25,11 @@ int security_compute_member_raw(const char * scon,
return -1;
}
+ if ((! scon) || (! tcon)) {
+ errno = EINVAL;
+ return -1;
+ }
+
snprintf(path, sizeof path, "%s/member", selinux_mnt);
fd = open(path, O_RDWR);
if (fd < 0)
diff --git a/libselinux/src/compute_relabel.c b/libselinux/src/compute_relabel.c
index 4615aee..6a37acf 100644
--- a/libselinux/src/compute_relabel.c
+++ b/libselinux/src/compute_relabel.c
@@ -25,6 +25,11 @@ int security_compute_relabel_raw(const char * scon,
return -1;
}
+ if ((! scon) || (! tcon)) {
+ errno = EINVAL;
+ return -1;
+ }
+
snprintf(path, sizeof path, "%s/relabel", selinux_mnt);
fd = open(path, O_RDWR);
if (fd < 0)
diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c
index b37c5d3..3737c28 100644
--- a/libselinux/src/compute_user.c
+++ b/libselinux/src/compute_user.c
@@ -24,6 +24,11 @@ int security_compute_user_raw(const char * scon,
return -1;
}
+ if (! scon) {
+ errno = EINVAL;
+ return -1;
+ }
+
snprintf(path, sizeof path, "%s/user", selinux_mnt);
fd = open(path, O_RDWR);
if (fd < 0)
diff --git a/libselinux/src/fsetfilecon.c b/libselinux/src/fsetfilecon.c
index 52707d0..83c138e 100644
--- a/libselinux/src/fsetfilecon.c
+++ b/libselinux/src/fsetfilecon.c
@@ -9,8 +9,12 @@
int fsetfilecon_raw(int fd, const char * context)
{
- int rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1,
- 0);
+ int rc;
+ if (! context) {
+ errno = EINVAL;
+ return -1;
+ }
+ rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
if (rc < 0 && errno == ENOTSUP) {
char * ccontext = NULL;
int err = errno;
diff --git a/libselinux/src/lsetfilecon.c b/libselinux/src/lsetfilecon.c
index 1d3b28a..278e42a 100644
--- a/libselinux/src/lsetfilecon.c
+++ b/libselinux/src/lsetfilecon.c
@@ -9,8 +9,13 @@
int lsetfilecon_raw(const char *path, const char * context)
{
- int rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
- 0);
+ int rc;
+ if (! context) {
+ errno = EINVAL;
+ return -1;
+ }
+
+ rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
if (rc < 0 && errno == ENOTSUP) {
char * ccontext = NULL;
int err = errno;
diff --git a/libselinux/src/setfilecon.c b/libselinux/src/setfilecon.c
index d05969c..dddce3c 100644
--- a/libselinux/src/setfilecon.c
+++ b/libselinux/src/setfilecon.c
@@ -9,8 +9,12 @@
int setfilecon_raw(const char *path, const char * context)
{
- int rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
- 0);
+ int rc;
+ if (! context) {
+ errno = EINVAL;
+ return -1;
+ }
+ rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
if (rc < 0 && errno == ENOTSUP) {
char * ccontext = NULL;
int err = errno;
--
2.6.3
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null.
2015-12-09 20:47 [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null Petr Lautrbach
@ 2015-12-17 13:55 ` Steve Lawrence
2015-12-17 14:06 ` Petr Lautrbach
2015-12-17 14:22 ` Joshua Brindle
0 siblings, 2 replies; 4+ messages in thread
From: Steve Lawrence @ 2015-12-17 13:55 UTC (permalink / raw)
To: Petr Lautrbach, selinux
I believe this patch, or something similar, was sent to the list in the
past and was rejected. Passing in a NULL context is considered invalid
use, similar to strdup/strcmp/etc. and is a bug in the calling process.
On 12/09/2015 03:47 PM, Petr Lautrbach wrote:
> From: Dan Walsh <dwalsh@redhat.com>
>
> Return errno EINVAL, to prevent segfault.
>
> Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
> ---
> libselinux/src/avc_sidtab.c | 5 +++++
> libselinux/src/canonicalize_context.c | 5 +++++
> libselinux/src/check_context.c | 5 +++++
> libselinux/src/compute_av.c | 5 +++++
> libselinux/src/compute_create.c | 5 +++++
> libselinux/src/compute_member.c | 5 +++++
> libselinux/src/compute_relabel.c | 5 +++++
> libselinux/src/compute_user.c | 5 +++++
> libselinux/src/fsetfilecon.c | 8 ++++++--
> libselinux/src/lsetfilecon.c | 9 +++++++--
> libselinux/src/setfilecon.c | 8 ++++++--
> 11 files changed, 59 insertions(+), 6 deletions(-)
>
> diff --git a/libselinux/src/avc_sidtab.c b/libselinux/src/avc_sidtab.c
> index 9669264..a46cfa7 100644
> --- a/libselinux/src/avc_sidtab.c
> +++ b/libselinux/src/avc_sidtab.c
> @@ -81,6 +81,11 @@ sidtab_context_to_sid(struct sidtab *s,
> int hvalue, rc = 0;
> struct sidtab_node *cur;
>
> + if (! ctx) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> *sid = NULL;
> hvalue = sidtab_hash(ctx);
>
> diff --git a/libselinux/src/canonicalize_context.c b/libselinux/src/canonicalize_context.c
> index 7cf3139..9d8dc86 100644
> --- a/libselinux/src/canonicalize_context.c
> +++ b/libselinux/src/canonicalize_context.c
> @@ -17,6 +17,11 @@ int security_canonicalize_context_raw(const char * con,
> size_t size;
> int fd, ret;
>
> + if (! con) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> if (!selinux_mnt) {
> errno = ENOENT;
> return -1;
> diff --git a/libselinux/src/check_context.c b/libselinux/src/check_context.c
> index 52063fa..9637dd7 100644
> --- a/libselinux/src/check_context.c
> +++ b/libselinux/src/check_context.c
> @@ -14,6 +14,11 @@ int security_check_context_raw(const char * con)
> char path[PATH_MAX];
> int fd, ret;
>
> + if (! con) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> if (!selinux_mnt) {
> errno = ENOENT;
> return -1;
> diff --git a/libselinux/src/compute_av.c b/libselinux/src/compute_av.c
> index 937e5c3..e67b3d3 100644
> --- a/libselinux/src/compute_av.c
> +++ b/libselinux/src/compute_av.c
> @@ -26,6 +26,11 @@ int security_compute_av_flags_raw(const char * scon,
> return -1;
> }
>
> + if ((! scon) || (! tcon)) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> snprintf(path, sizeof path, "%s/access", selinux_mnt);
> fd = open(path, O_RDWR);
> if (fd < 0)
> diff --git a/libselinux/src/compute_create.c b/libselinux/src/compute_create.c
> index 9559d42..7de721a 100644
> --- a/libselinux/src/compute_create.c
> +++ b/libselinux/src/compute_create.c
> @@ -64,6 +64,11 @@ int security_compute_create_name_raw(const char * scon,
> return -1;
> }
>
> + if ((! scon) || (! tcon)) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> snprintf(path, sizeof path, "%s/create", selinux_mnt);
> fd = open(path, O_RDWR);
> if (fd < 0)
> diff --git a/libselinux/src/compute_member.c b/libselinux/src/compute_member.c
> index 1fc7e41..4ff2173 100644
> --- a/libselinux/src/compute_member.c
> +++ b/libselinux/src/compute_member.c
> @@ -25,6 +25,11 @@ int security_compute_member_raw(const char * scon,
> return -1;
> }
>
> + if ((! scon) || (! tcon)) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> snprintf(path, sizeof path, "%s/member", selinux_mnt);
> fd = open(path, O_RDWR);
> if (fd < 0)
> diff --git a/libselinux/src/compute_relabel.c b/libselinux/src/compute_relabel.c
> index 4615aee..6a37acf 100644
> --- a/libselinux/src/compute_relabel.c
> +++ b/libselinux/src/compute_relabel.c
> @@ -25,6 +25,11 @@ int security_compute_relabel_raw(const char * scon,
> return -1;
> }
>
> + if ((! scon) || (! tcon)) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> snprintf(path, sizeof path, "%s/relabel", selinux_mnt);
> fd = open(path, O_RDWR);
> if (fd < 0)
> diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c
> index b37c5d3..3737c28 100644
> --- a/libselinux/src/compute_user.c
> +++ b/libselinux/src/compute_user.c
> @@ -24,6 +24,11 @@ int security_compute_user_raw(const char * scon,
> return -1;
> }
>
> + if (! scon) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> snprintf(path, sizeof path, "%s/user", selinux_mnt);
> fd = open(path, O_RDWR);
> if (fd < 0)
> diff --git a/libselinux/src/fsetfilecon.c b/libselinux/src/fsetfilecon.c
> index 52707d0..83c138e 100644
> --- a/libselinux/src/fsetfilecon.c
> +++ b/libselinux/src/fsetfilecon.c
> @@ -9,8 +9,12 @@
>
> int fsetfilecon_raw(int fd, const char * context)
> {
> - int rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1,
> - 0);
> + int rc;
> + if (! context) {
> + errno = EINVAL;
> + return -1;
> + }
> + rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
> if (rc < 0 && errno == ENOTSUP) {
> char * ccontext = NULL;
> int err = errno;
> diff --git a/libselinux/src/lsetfilecon.c b/libselinux/src/lsetfilecon.c
> index 1d3b28a..278e42a 100644
> --- a/libselinux/src/lsetfilecon.c
> +++ b/libselinux/src/lsetfilecon.c
> @@ -9,8 +9,13 @@
>
> int lsetfilecon_raw(const char *path, const char * context)
> {
> - int rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
> - 0);
> + int rc;
> + if (! context) {
> + errno = EINVAL;
> + return -1;
> + }
> +
> + rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
> if (rc < 0 && errno == ENOTSUP) {
> char * ccontext = NULL;
> int err = errno;
> diff --git a/libselinux/src/setfilecon.c b/libselinux/src/setfilecon.c
> index d05969c..dddce3c 100644
> --- a/libselinux/src/setfilecon.c
> +++ b/libselinux/src/setfilecon.c
> @@ -9,8 +9,12 @@
>
> int setfilecon_raw(const char *path, const char * context)
> {
> - int rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
> - 0);
> + int rc;
> + if (! context) {
> + errno = EINVAL;
> + return -1;
> + }
> + rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
> if (rc < 0 && errno == ENOTSUP) {
> char * ccontext = NULL;
> int err = errno;
>
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null.
2015-12-17 13:55 ` Steve Lawrence
@ 2015-12-17 14:06 ` Petr Lautrbach
2015-12-17 14:22 ` Joshua Brindle
1 sibling, 0 replies; 4+ messages in thread
From: Petr Lautrbach @ 2015-12-17 14:06 UTC (permalink / raw)
To: Steve Lawrence, selinux
[-- Attachment #1: Type: text/plain, Size: 7132 bytes --]
On 12/17/2015 02:55 PM, Steve Lawrence wrote:
> I believe this patch, or something similar, was sent to the list in the
> past and was rejected. Passing in a NULL context is considered invalid
> use, similar to strdup/strcmp/etc. and is a bug in the calling process.
I didn't know that, sorry.
I'll mark this patch as upstream rejected, Fedora downstream only; to
prevent future attempts to re-send it again.
Thanks,
Petr
>
> On 12/09/2015 03:47 PM, Petr Lautrbach wrote:
>> From: Dan Walsh <dwalsh@redhat.com>
>>
>> Return errno EINVAL, to prevent segfault.
>>
>> Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
>> ---
>> libselinux/src/avc_sidtab.c | 5 +++++
>> libselinux/src/canonicalize_context.c | 5 +++++
>> libselinux/src/check_context.c | 5 +++++
>> libselinux/src/compute_av.c | 5 +++++
>> libselinux/src/compute_create.c | 5 +++++
>> libselinux/src/compute_member.c | 5 +++++
>> libselinux/src/compute_relabel.c | 5 +++++
>> libselinux/src/compute_user.c | 5 +++++
>> libselinux/src/fsetfilecon.c | 8 ++++++--
>> libselinux/src/lsetfilecon.c | 9 +++++++--
>> libselinux/src/setfilecon.c | 8 ++++++--
>> 11 files changed, 59 insertions(+), 6 deletions(-)
>>
>> diff --git a/libselinux/src/avc_sidtab.c b/libselinux/src/avc_sidtab.c
>> index 9669264..a46cfa7 100644
>> --- a/libselinux/src/avc_sidtab.c
>> +++ b/libselinux/src/avc_sidtab.c
>> @@ -81,6 +81,11 @@ sidtab_context_to_sid(struct sidtab *s,
>> int hvalue, rc = 0;
>> struct sidtab_node *cur;
>>
>> + if (! ctx) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> *sid = NULL;
>> hvalue = sidtab_hash(ctx);
>>
>> diff --git a/libselinux/src/canonicalize_context.c b/libselinux/src/canonicalize_context.c
>> index 7cf3139..9d8dc86 100644
>> --- a/libselinux/src/canonicalize_context.c
>> +++ b/libselinux/src/canonicalize_context.c
>> @@ -17,6 +17,11 @@ int security_canonicalize_context_raw(const char * con,
>> size_t size;
>> int fd, ret;
>>
>> + if (! con) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> if (!selinux_mnt) {
>> errno = ENOENT;
>> return -1;
>> diff --git a/libselinux/src/check_context.c b/libselinux/src/check_context.c
>> index 52063fa..9637dd7 100644
>> --- a/libselinux/src/check_context.c
>> +++ b/libselinux/src/check_context.c
>> @@ -14,6 +14,11 @@ int security_check_context_raw(const char * con)
>> char path[PATH_MAX];
>> int fd, ret;
>>
>> + if (! con) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> if (!selinux_mnt) {
>> errno = ENOENT;
>> return -1;
>> diff --git a/libselinux/src/compute_av.c b/libselinux/src/compute_av.c
>> index 937e5c3..e67b3d3 100644
>> --- a/libselinux/src/compute_av.c
>> +++ b/libselinux/src/compute_av.c
>> @@ -26,6 +26,11 @@ int security_compute_av_flags_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/access", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd < 0)
>> diff --git a/libselinux/src/compute_create.c b/libselinux/src/compute_create.c
>> index 9559d42..7de721a 100644
>> --- a/libselinux/src/compute_create.c
>> +++ b/libselinux/src/compute_create.c
>> @@ -64,6 +64,11 @@ int security_compute_create_name_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/create", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd < 0)
>> diff --git a/libselinux/src/compute_member.c b/libselinux/src/compute_member.c
>> index 1fc7e41..4ff2173 100644
>> --- a/libselinux/src/compute_member.c
>> +++ b/libselinux/src/compute_member.c
>> @@ -25,6 +25,11 @@ int security_compute_member_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/member", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd < 0)
>> diff --git a/libselinux/src/compute_relabel.c b/libselinux/src/compute_relabel.c
>> index 4615aee..6a37acf 100644
>> --- a/libselinux/src/compute_relabel.c
>> +++ b/libselinux/src/compute_relabel.c
>> @@ -25,6 +25,11 @@ int security_compute_relabel_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/relabel", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd < 0)
>> diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c
>> index b37c5d3..3737c28 100644
>> --- a/libselinux/src/compute_user.c
>> +++ b/libselinux/src/compute_user.c
>> @@ -24,6 +24,11 @@ int security_compute_user_raw(const char * scon,
>> return -1;
>> }
>>
>> + if (! scon) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/user", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd < 0)
>> diff --git a/libselinux/src/fsetfilecon.c b/libselinux/src/fsetfilecon.c
>> index 52707d0..83c138e 100644
>> --- a/libselinux/src/fsetfilecon.c
>> +++ b/libselinux/src/fsetfilecon.c
>> @@ -9,8 +9,12 @@
>>
>> int fsetfilecon_raw(int fd, const char * context)
>> {
>> - int rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> + rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc < 0 && errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>> diff --git a/libselinux/src/lsetfilecon.c b/libselinux/src/lsetfilecon.c
>> index 1d3b28a..278e42a 100644
>> --- a/libselinux/src/lsetfilecon.c
>> +++ b/libselinux/src/lsetfilecon.c
>> @@ -9,8 +9,13 @@
>>
>> int lsetfilecon_raw(const char *path, const char * context)
>> {
>> - int rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> + rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc < 0 && errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>> diff --git a/libselinux/src/setfilecon.c b/libselinux/src/setfilecon.c
>> index d05969c..dddce3c 100644
>> --- a/libselinux/src/setfilecon.c
>> +++ b/libselinux/src/setfilecon.c
>> @@ -9,8 +9,12 @@
>>
>> int setfilecon_raw(const char *path, const char * context)
>> {
>> - int rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> + rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc < 0 && errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>>
>
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null.
2015-12-17 13:55 ` Steve Lawrence
2015-12-17 14:06 ` Petr Lautrbach
@ 2015-12-17 14:22 ` Joshua Brindle
1 sibling, 0 replies; 4+ messages in thread
From: Joshua Brindle @ 2015-12-17 14:22 UTC (permalink / raw)
To: Steve Lawrence; +Cc: Petr Lautrbach, selinux
Steve Lawrence wrote:
> I believe this patch, or something similar, was sent to the list in the
> past and was rejected. Passing in a NULL context is considered invalid
> use, similar to strdup/strcmp/etc. and is a bug in the calling process.
>
It isn't unreasonable for an API to indicate invalid usage (which is
what EINVAL does). The argument that strdup lets you shoot yourself in
the foot so we should to isn't very compelling...
> On 12/09/2015 03:47 PM, Petr Lautrbach wrote:
>> From: Dan Walsh<dwalsh@redhat.com>
>>
>> Return errno EINVAL, to prevent segfault.
>>
>> Signed-off-by: Petr Lautrbach<plautrba@redhat.com>
>> ---
>> libselinux/src/avc_sidtab.c | 5 +++++
>> libselinux/src/canonicalize_context.c | 5 +++++
>> libselinux/src/check_context.c | 5 +++++
>> libselinux/src/compute_av.c | 5 +++++
>> libselinux/src/compute_create.c | 5 +++++
>> libselinux/src/compute_member.c | 5 +++++
>> libselinux/src/compute_relabel.c | 5 +++++
>> libselinux/src/compute_user.c | 5 +++++
>> libselinux/src/fsetfilecon.c | 8 ++++++--
>> libselinux/src/lsetfilecon.c | 9 +++++++--
>> libselinux/src/setfilecon.c | 8 ++++++--
>> 11 files changed, 59 insertions(+), 6 deletions(-)
>>
>> diff --git a/libselinux/src/avc_sidtab.c b/libselinux/src/avc_sidtab.c
>> index 9669264..a46cfa7 100644
>> --- a/libselinux/src/avc_sidtab.c
>> +++ b/libselinux/src/avc_sidtab.c
>> @@ -81,6 +81,11 @@ sidtab_context_to_sid(struct sidtab *s,
>> int hvalue, rc = 0;
>> struct sidtab_node *cur;
>>
>> + if (! ctx) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> *sid = NULL;
>> hvalue = sidtab_hash(ctx);
>>
>> diff --git a/libselinux/src/canonicalize_context.c b/libselinux/src/canonicalize_context.c
>> index 7cf3139..9d8dc86 100644
>> --- a/libselinux/src/canonicalize_context.c
>> +++ b/libselinux/src/canonicalize_context.c
>> @@ -17,6 +17,11 @@ int security_canonicalize_context_raw(const char * con,
>> size_t size;
>> int fd, ret;
>>
>> + if (! con) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> if (!selinux_mnt) {
>> errno = ENOENT;
>> return -1;
>> diff --git a/libselinux/src/check_context.c b/libselinux/src/check_context.c
>> index 52063fa..9637dd7 100644
>> --- a/libselinux/src/check_context.c
>> +++ b/libselinux/src/check_context.c
>> @@ -14,6 +14,11 @@ int security_check_context_raw(const char * con)
>> char path[PATH_MAX];
>> int fd, ret;
>>
>> + if (! con) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> if (!selinux_mnt) {
>> errno = ENOENT;
>> return -1;
>> diff --git a/libselinux/src/compute_av.c b/libselinux/src/compute_av.c
>> index 937e5c3..e67b3d3 100644
>> --- a/libselinux/src/compute_av.c
>> +++ b/libselinux/src/compute_av.c
>> @@ -26,6 +26,11 @@ int security_compute_av_flags_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/access", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd< 0)
>> diff --git a/libselinux/src/compute_create.c b/libselinux/src/compute_create.c
>> index 9559d42..7de721a 100644
>> --- a/libselinux/src/compute_create.c
>> +++ b/libselinux/src/compute_create.c
>> @@ -64,6 +64,11 @@ int security_compute_create_name_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/create", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd< 0)
>> diff --git a/libselinux/src/compute_member.c b/libselinux/src/compute_member.c
>> index 1fc7e41..4ff2173 100644
>> --- a/libselinux/src/compute_member.c
>> +++ b/libselinux/src/compute_member.c
>> @@ -25,6 +25,11 @@ int security_compute_member_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/member", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd< 0)
>> diff --git a/libselinux/src/compute_relabel.c b/libselinux/src/compute_relabel.c
>> index 4615aee..6a37acf 100644
>> --- a/libselinux/src/compute_relabel.c
>> +++ b/libselinux/src/compute_relabel.c
>> @@ -25,6 +25,11 @@ int security_compute_relabel_raw(const char * scon,
>> return -1;
>> }
>>
>> + if ((! scon) || (! tcon)) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/relabel", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd< 0)
>> diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c
>> index b37c5d3..3737c28 100644
>> --- a/libselinux/src/compute_user.c
>> +++ b/libselinux/src/compute_user.c
>> @@ -24,6 +24,11 @@ int security_compute_user_raw(const char * scon,
>> return -1;
>> }
>>
>> + if (! scon) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> snprintf(path, sizeof path, "%s/user", selinux_mnt);
>> fd = open(path, O_RDWR);
>> if (fd< 0)
>> diff --git a/libselinux/src/fsetfilecon.c b/libselinux/src/fsetfilecon.c
>> index 52707d0..83c138e 100644
>> --- a/libselinux/src/fsetfilecon.c
>> +++ b/libselinux/src/fsetfilecon.c
>> @@ -9,8 +9,12 @@
>>
>> int fsetfilecon_raw(int fd, const char * context)
>> {
>> - int rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> + rc = fsetxattr(fd, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc< 0&& errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>> diff --git a/libselinux/src/lsetfilecon.c b/libselinux/src/lsetfilecon.c
>> index 1d3b28a..278e42a 100644
>> --- a/libselinux/src/lsetfilecon.c
>> +++ b/libselinux/src/lsetfilecon.c
>> @@ -9,8 +9,13 @@
>>
>> int lsetfilecon_raw(const char *path, const char * context)
>> {
>> - int rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> +
>> + rc = lsetxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc< 0&& errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>> diff --git a/libselinux/src/setfilecon.c b/libselinux/src/setfilecon.c
>> index d05969c..dddce3c 100644
>> --- a/libselinux/src/setfilecon.c
>> +++ b/libselinux/src/setfilecon.c
>> @@ -9,8 +9,12 @@
>>
>> int setfilecon_raw(const char *path, const char * context)
>> {
>> - int rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1,
>> - 0);
>> + int rc;
>> + if (! context) {
>> + errno = EINVAL;
>> + return -1;
>> + }
>> + rc = setxattr(path, XATTR_NAME_SELINUX, context, strlen(context) + 1, 0);
>> if (rc< 0&& errno == ENOTSUP) {
>> char * ccontext = NULL;
>> int err = errno;
>>
>
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2015-12-17 14:23 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-12-09 20:47 [PATCH] libselinux: Verify context input to funtions to make sure the context field is not null Petr Lautrbach
2015-12-17 13:55 ` Steve Lawrence
2015-12-17 14:06 ` Petr Lautrbach
2015-12-17 14:22 ` Joshua Brindle
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.