Re: [PATCH] libsepol: Free context on genfscon wildcard error in kernel_to_*

On Wed, Aug 12, 2026 at 12:14 PM Stephen Smalley
<[email protected]> wrote:
>
> On Wed, Aug 12, 2026 at 11:58 AM James Carter <[email protected]> wrote:
> >
> > A policy with the policy capability genfs_seclabel_wildcard should
> > have all of its genfscon paths end with "*" (which is added for
> > backwards compatibility when compiling the policy). When converting
> > a kernel policy to CIL or a policy.conf, an error occurs if the
> > genfscon path does not end with "*". On this error path the context
> > is not freed in either kernel_to_cil or kernel_to_conf.
> >
> > Free the context when exiting with an error for a genfscon path not
> > ending with a "*" when required.
> >
> > Signed-off-by: James Carter <[email protected]>
>
> Acked-by: Stephen Smalley <[email protected]>

Merged.