checkpolicy: free identifiers on invalid typebounds

Free the two identifiers on an invalid typebounds in the error branch, similar to the success branch. Reported-by: oss-fuzz (issue 67700) Signed-off-by: Christian Göttsche <[email protected]> Acked-by: James Carter <[email protected]>
SELinuxProject · Apr 4, 2024 · 9f2f9e2 · 9f2f9e2
1 parent 39b3cc5
commit 9f2f9e2
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/checkpolicy/policy_define.c b/checkpolicy/policy_define.c
@@ -1477,8 +1477,12 @@ int define_typebounds(void)
  }
 
  while ((id = queue_remove(id_queue))) {
- if (define_typebounds_helper(bounds, id))
+ if (define_typebounds_helper(bounds, id)) {
+ free(bounds);
+ free(id);
  return -1;
+ }
+
  free(id);
  }
  free(bounds);