selinux: fix GPF on invalid policy
authorStephen Smalley <sds@tycho.nsa.gov>
Wed, 9 Jan 2019 15:55:10 +0000 (10:55 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 23 Jan 2019 07:09:50 +0000 (08:09 +0100)
commit484636b44424008464636f713424a79bd7be5265
tree44f29b0c4522a02e22cb621a8b0a0cf6bb313003
parent26e6d521e5520d62f72fc5682e87bd0bcdbc5b66
selinux: fix GPF on invalid policy

commit 5b0e7310a2a33c06edc7eb81ffc521af9b2c5610 upstream.

levdatum->level can be NULL if we encounter an error while loading
the policy during sens_read prior to initializing it.  Make sure
sens_destroy handles that case correctly.

Reported-by: syzbot+6664500f0f18f07a5c0e@syzkaller.appspotmail.com
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/selinux/ss/policydb.c