Paolo Abeni eead1c2ea2 netlabel: cope with NULL catmap ... The cipso and calipso code can set the MLS_CAT attribute on successful parsing, even if the corresponding catmap has not been allocated, as per current configuration and external input. Later, selinux code tries to access the catmap if the MLS_CAT flag is present via netlbl_catmap_getlong(). That may cause null ptr dereference while processing incoming network traffic. Address the issue setting the MLS_CAT flag only if the catmap is really allocated. Additionally let netlbl_catmap_getlong() cope with NULL catmap. Reported-by: Matthew Sheets <matthew.sheets@gd-ms.com> Fixes: 4b8feff251 ("netlabel: fix the horribly broken catmap functions") Fixes: ceba1832b1 ("calipso: Set the calipso socket label to match the secattr.") Signed-off-by: Paolo Abeni <pabeni@redhat.com> Acked-by: Paul Moore <paul@paul-moore.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2020-05-12 18:12:40 -07:00
..
Kconfig	netlabel: Kconfig: Update reference for NetLabel Tools project	2020-04-22 19:55:01 -07:00
Makefile
netlabel_addrlist.c
netlabel_addrlist.h
netlabel_calipso.c
netlabel_calipso.h
netlabel_cipso_v4.c
netlabel_cipso_v4.h
netlabel_domainhash.c
netlabel_domainhash.h
netlabel_kapi.c	netlabel: cope with NULL catmap	2020-05-12 18:12:40 -07:00
netlabel_mgmt.c
netlabel_mgmt.h
netlabel_unlabeled.c
netlabel_unlabeled.h
netlabel_user.c
netlabel_user.h