tree 28335c510992fd6f5d03ce107fbe56c38d6d1709
parent 86e6ae67fd17e0812036a8bc7df72e9b223846c8
author Nicolas Iooss <nicolas.iooss@m4x.org> 1491597868 +0200
committer Stephen Smalley <sds@tycho.nsa.gov> 1491935221 -0400

libselinux: make process_boolean() fail on invalid lines

When security_load_booleans() calls process_boolean() to parse a boolean
definition, process_boolean() returns a successful value when it fails
to use strtok_r() (e.g. when there is no "=" in the parsed line). This
leads security_load_booleans() to use uninitialized name and/or val when
setting the boolean into the policy.

This issue has been found using clang's static analyzer and is similar
to the one which has been fixed in libsepol with commit 76f8c04c197f
("libsepol: make process_boolean() fail on invalid lines"). Fix it in
the same way.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>