> > On 09/19/2016 05:51 PM, Roberts, William C wrote: > > > FYI I only tested this with checkfc... > > > > Evidently. matchpathcon and sefcontext_compile both report calls to > > free() on invalid pointers and abort. > > That doesn’t surprise me, I only tested the checkfc usages. Hence #4 in todo's > I looked at the sefcontext_compile bug, and its yet another conglomeration where internal Interfaces into libselinux are presumed and duplicate code exists (for loading a file). It implements its own routine for the freeing of Spec data. Why doesn't it use proper libselinux interfaces, or libselinux expose the proper Interfaces for this type of work? Is this just an example of something that should be fixed or is there some deeper reasoning to its construction? I could not get matchpatchcon to reproduce (built with ASAN): ./selinux/libselinux/utils/matchpathcon /etc -f file_contexts /etc u:object_r:rootfs:s0 Bill _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.