Attachment 152625 Details for Bug 235680 – patch addressing socket leak

[patch] patch addressing socket leak

ipsec-tools-0.6.5-leak.patch (text/plain), 1.82 KB, created by Steve Grubb on 2007-04-14 20:19:19 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Steve Grubb

Created: 2007-04-14 20:19:19 UTC

Size: 1.82 KB

patch

obsolete

>diff -urp ipsec-tools-0.6.5.orig/src/racoon/main.c ipsec-tools-0.6.5/src/racoon/main.c
>--- ipsec-tools-0.6.5.orig/src/racoon/main.c	2007-04-14 16:00:16.000000000 -0400
>+++ ipsec-tools-0.6.5/src/racoon/main.c	2007-04-14 16:10:12.000000000 -0400
>@@ -163,7 +163,10 @@ main(ac, av)
> #ifdef DEBUG_RECORD_MALLOCATION
> 	DRM_init();
> #endif
>-
>+#ifdef HAVE_SECCTX
>+	if (init_avc() != 0)
>+		errx(1, "Could not init avcs");
>+#endif
> 	eay_init();
> 	initlcconf();
> 	initrmconf();
>diff -urp ipsec-tools-0.6.5.orig/src/racoon/policy.h ipsec-tools-0.6.5/src/racoon/policy.h
>--- ipsec-tools-0.6.5.orig/src/racoon/policy.h	2007-04-14 16:00:17.000000000 -0400
>+++ ipsec-tools-0.6.5/src/racoon/policy.h	2007-04-14 16:06:13.000000000 -0400
>@@ -154,6 +154,7 @@ extern const char *spidx2str __P((const 
> #ifdef HAVE_SECCTX
> #include <selinux/selinux.h>
> extern int get_security_context __P((vchar_t *, struct policyindex *));
>+extern int init_avc __P((void));
> extern int within_range __P((security_context_t, security_context_t));
> extern void set_secctx_in_proposal __P((struct ph2handle *, struct policyindex));
> #endif
>diff -urp ipsec-tools-0.6.5.orig/src/racoon/security.c ipsec-tools-0.6.5/src/racoon/security.c
>--- ipsec-tools-0.6.5.orig/src/racoon/security.c	2007-04-14 16:00:17.000000000 -0400
>+++ ipsec-tools-0.6.5/src/racoon/security.c	2007-04-14 16:09:40.000000000 -0400
>@@ -182,7 +182,7 @@ set_secctx_in_proposal(iph2, spidx)
>  * 		1	if the avc could not be initialized
>  */
> 
>-static int
>+int
> init_avc(void)
> {
> 	int rtn = 0;
>@@ -225,13 +225,6 @@ within_range(security_context_t sl, secu
> 	if (!*range)	/* This policy doesn't have security context */
> 		return 1;
> 
>-	rtn = init_avc();
>-	if (rtn != 0) {
>-		plog(LLV_ERROR, LOCATION, NULL, 
>-			"within_range: couldn't initialize the AVC\n");
>-		return 0;
>-	}
>-
> 	/*
> 	 * Get the sids for the sl and range contexts
> 	 */

Actions: View | Diff

Attachments on bug 235680: 152625 | 152626 | 152627