selinux: do not leave dangling pointer behind
authorChristian Göttsche <cgzones@googlemail.com>
Thu, 20 Apr 2023 15:04:58 +0000 (17:04 +0200)
committerPaul Moore <paul@paul-moore.com>
Mon, 8 May 2023 20:37:42 +0000 (16:37 -0400)
commit53f3517ae0870fcb398afbba8ff901d0267772b3
tree894f95d339a535f8ad246ddc84d9d9691a2a0231
parent6f933aa7dfd0bb84b7935168f1d45abec4f702c1
selinux: do not leave dangling pointer behind

In case mls_context_cpy() fails due to OOM set the free'd pointer in
context_cpy() to NULL to avoid it potentially being dereferenced or
free'd again in future.  Freeing a NULL pointer is well-defined and a
hard NULL dereference crash is at least not exploitable and should give
a workable stack trace.

Fixes: 12b29f34558b ("selinux: support deferred mapping of contexts")
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/context.h