Bug 1383811 - sepolgen-ifgen-attr-helper segfaults on certain inputs
Summary: sepolgen-ifgen-attr-helper segfaults on certain inputs
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: policycoreutils
Version: 7.3
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Petr Lautrbach
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-10-11 20:16 UTC by Milos Malik
Modified: 2017-06-29 13:42 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1383808
Environment:
Last Closed: 2017-06-29 13:42:38 UTC
Target Upstream Version:


Attachments (Terms of Use)
bzip2 archive of input files causing a crash (958.07 KB, application/x-bzip)
2016-10-11 20:16 UTC, Milos Malik
no flags Details

Description Milos Malik 2016-10-11 20:16:04 UTC
Created attachment 1209317 [details]
bzip2 archive of input files causing a crash

Description of problem:
* found by American Fuzzy Lop

Version-Release number of selected component (if applicable):
libselinux-2.5-6.el7.x86_64
libselinux-debuginfo-2.5-6.el7.x86_64
libselinux-devel-2.5-6.el7.x86_64
libselinux-python-2.5-6.el7.x86_64
libselinux-ruby-2.5-6.el7.x86_64
libselinux-utils-2.5-6.el7.x86_64
libsemanage-2.5-4.el7.x86_64
libsemanage-devel-2.5-4.el7.x86_64
libsemanage-python-2.5-4.el7.x86_64
libsemanage-static-2.5-4.el7.x86_64
libsepol-2.5-6.el7.x86_64
libsepol-debuginfo-2.5-6.el7.x86_64
libsepol-devel-2.5-6.el7.x86_64
libsepol-static-2.5-6.el7.x86_64
policycoreutils-2.5-9.el7.x86_64
policycoreutils-debuginfo-2.5-9.el7.x86_64
policycoreutils-devel-2.5-9.el7.x86_64
policycoreutils-gui-2.5-9.el7.x86_64
policycoreutils-newrole-2.5-9.el7.x86_64
policycoreutils-python-2.5-9.el7.x86_64
policycoreutils-sandbox-2.5-9.el7.x86_64
selinux-policy-3.13.1-102.el7.noarch
selinux-policy-devel-3.13.1-102.el7.noarch
selinux-policy-doc-3.13.1-102.el7.noarch
selinux-policy-minimum-3.13.1-102.el7.noarch
selinux-policy-mls-3.13.1-102.el7.noarch
selinux-policy-sandbox-3.13.1-102.el7.noarch
selinux-policy-targeted-3.13.1-102.el7.noarch

How reproducible:
* always

Steps to Reproduce:
# ls -l /etc/selinux/minimum/policy/policy.30 
-rw-r--r--. 1 root root 834610 Oct  3 10:45 /etc/selinux/minimum/policy/policy.30
# tar jxf crashes.tar.bz2
# ls -l sepolgen-ifgen-attr-helper/
total 5712
-rw-------. 1 root root 834610 Oct 11 22:09 id000000
-rw-------. 1 root root 834610 Oct 11 22:09 id000001
-rw-------. 1 root root 834610 Oct 11 22:09 id000002
-rw-------. 1 root root 834610 Oct 11 22:09 id000003
-rw-------. 1 root root 834610 Oct 11 22:09 id000004
-rw-------. 1 root root 834610 Oct 11 22:09 id000005
-rw-------. 1 root root 834610 Oct 11 22:09 id000006
# sepolgen-ifgen-attr-helper sepolgen-ifgen-attr-helper/id000001 output
libsepol.policydb_index_others: security:  6 users, 9 roles, 1756 types, 112 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  91 classes, 19334 rules, 4646 cond rules
Segmentation fault
# dmesg | tail -n 1
[ 3564.784906] sepolgen-ifgen-[11987]: segfault at 20 ip 00007fbe6c493ab0 sp 00007fff34428540 error 4 in sepolgen-ifgen-attr-helper[7fbe6c492000+29000]
# 

Actual results:
* segfaults

Expected results:
* some error message but no segfault


Note You need to log in before you can comment on or make changes to this bug.