Re: [PATCH] libsepol: cap max depth for __evaluate_classperms_list()

Stephen Smalley <[email protected]> Mon, 27 Jul 2026 16:17:23 -0400

Newsgroups	org.kernel.vger.selinux
Message-ID	<CAEjxPJ6rXp4-zKFtNJFakT2ES8qZPZFSZ+ifRDCcmfz37tdD-Q@mail.gmail.com>

On Mon, Jul 27, 2026 at 12:53 PM James Carter <[email protected]> wrote:
>
> On Mon, Jul 27, 2026 at 10:00 AM Stephen Smalley
> <[email protected]> wrote:
> >
> > __evaluate_classperms_list() is called recursively without
> > a depth limit, which can overflow the stack. Cap the depth
> > to avoid such overflows.
> >
> > Reported-by: oss-fuzz (issue 479899924)
> > Signed-off-by: Stephen Smalley <[email protected]>
>
> Acked-by: James Carter <[email protected]>

Merged.