libsepol/cil: free nlmsg hashtable on error

Free the hashtable for nlmsg xperm rules similar to the ioctl hashtable. Fixes: 1fd41f4 ("libsepol/cil: add support for xperms in conditional policies") Reported-by: oss-fuzz (issue 388376332) Signed-off-by: Christian Göttsche <[email protected]> Acked-by: James Carter <[email protected]>
SELinuxProject · Jan 15, 2025 · 4dd442f · 4dd442f
1 parent d13d13e
commit 4dd442f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/libsepol/cil/src/cil_binary.c b/libsepol/cil/src/cil_binary.c
@@ -2616,6 +2616,8 @@ int cil_booleanif_to_policydb(policydb_t *pdb, const struct cil_db *db, struct c
 	return SEPOL_OK;
 
 exit:
+	hashtab_map(avrulex_nlmsg_table, __cil_avrulex_xperm_destroy, NULL);
+	hashtab_destroy(avrulex_nlmsg_table);
 	hashtab_map(avrulex_ioctl_table, __cil_avrulex_xperm_destroy, NULL);
 	hashtab_destroy(avrulex_ioctl_table);
 	if (tmp_cond) {