summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichal Zidek <mzidek@redhat.com>2014-04-04 14:09:24 +0200
committerJakub Hrozek <jhrozek@redhat.com>2014-04-04 17:30:08 +0200
commit7ac7dec08ec2c82a86fd6a90388993cfcee26da1 (patch)
treea698cbc8674892eaf79a436a823323b0f07d084c
parenta203f4a0e7c60d6198f4ce8bf99952cfec5a0351 (diff)
downloadsssd-7ac7dec08ec2c82a86fd6a90388993cfcee26da1.tar.gz
sssd-7ac7dec08ec2c82a86fd6a90388993cfcee26da1.tar.xz
sssd-7ac7dec08ec2c82a86fd6a90388993cfcee26da1.zip
Possible null dereference in SELinux code
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
-rw-r--r--src/providers/ipa/ipa_selinux.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/providers/ipa/ipa_selinux.c b/src/providers/ipa/ipa_selinux.c
index 7c3ce45c6..e0d7a006d 100644
--- a/src/providers/ipa/ipa_selinux.c
+++ b/src/providers/ipa/ipa_selinux.c
@@ -322,7 +322,7 @@ static void ipa_selinux_handler_done(struct tevent_req *req)
goto fail;
}
- if (map_count > 0 && maps != NULL) {
+ if (map_count > 0) {
ret = ipa_save_user_maps(sysdb, op_ctx->ipa_domain, map_count, maps);
if (ret != EOK) {
goto fail;
@@ -1345,7 +1345,7 @@ ipa_get_selinux_recv(struct tevent_req *req,
*default_user = NULL;
}
- if (state->selinuxmaps != NULL) {
+ if (state->selinuxmaps != NULL && state->nmaps != 0) {
*count = state->nmaps;
*maps = talloc_steal(mem_ctx, state->selinuxmaps);
} else {