Hi Linus, Three small patches to fix problems in the SELinux code, all found via clang. Two patches fix potential double-free conditions and one fixes an undefined return value. All are pretty easy to understand and the commit descriptions are reasonably good so I don't think there is a need to go into more detail here. Please merge these for v5.8-rcX. Thanks, -Paul -- The following changes since commit fe5a90b8c14914397a3bb0c214d142103c1ba3bf: selinux: netlabel: Remove unused inline function (2020-05-12 20:16:33 -0400) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20200621 for you to fetch changes up to 8231b0b9c322c894594fb42eb0eb9f93544a6acc: selinux: fix undefined return of cond_evaluate_expr (2020-06-17 17:36:40 -0400) ---------------------------------------------------------------- selinux/stable-5.8 PR 20200621 ---------------------------------------------------------------- Tom Rix (3): selinux: fix double free selinux: fix a double free in cond_read_node()/cond_read_list() selinux: fix undefined return of cond_evaluate_expr security/selinux/ss/conditional.c | 21 ++++++++------------- security/selinux/ss/services.c | 4 ++++ 2 files changed, 12 insertions(+), 13 deletions(-) -- paul moore www.paul-moore.com