selinux: fix GPF on invalid policy
authorStephen Smalley <sds@tycho.nsa.gov>
Wed, 9 Jan 2019 15:55:10 +0000 (10:55 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 26 Jan 2019 08:44:26 +0000 (09:44 +0100)
commitf643372c915bbb9d11787b785890642fce3c1ab2
tree1108b8b6b1828247e7b0da2c37d9ea5ddb44d9cf
parent8554867473096389ca0f5b75ee6a7eb9a965eb76
selinux: fix GPF on invalid policy

commit 5b0e7310a2a33c06edc7eb81ffc521af9b2c5610 upstream.

levdatum->level can be NULL if we encounter an error while loading
the policy during sens_read prior to initializing it.  Make sure
sens_destroy handles that case correctly.

Reported-by: syzbot+6664500f0f18f07a5c0e@syzkaller.appspotmail.com
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/selinux/ss/policydb.c