Re: [PATCH] libsepol: Free context on genfscon wildcard error in kernel_to_*

On Wed, Aug 12, 2026 at 11:58 AM James Carter <[email protected]> wrote:
>
> A policy with the policy capability genfs_seclabel_wildcard should
> have all of its genfscon paths end with "*" (which is added for
> backwards compatibility when compiling the policy). When converting
> a kernel policy to CIL or a policy.conf, an error occurs if the
> genfscon path does not end with "*". On this error path the context
> is not freed in either kernel_to_cil or kernel_to_conf.
>
> Free the context when exiting with an error for a genfscon path not
> ending with a "*" when required.
>
> Signed-off-by: James Carter <[email protected]>

Acked-by: Stephen Smalley <[email protected]>