tree c35db44612802989e1e84f6ff69c414d6bc858e1
parent b2104ac0bd951a2887a03b09e2106fcff5fad94e
author Paul Moore <paul@paul-moore.com> 1575941986 -0500
committer Paul Moore <paul@paul-moore.com> 1576005413 -0500

selinux: ensure we cleanup the internal AVC counters on error in avc_insert()

Fix avc_insert() to call avc_node_kill() if we've already allocated
an AVC node and the code fails to insert the node in the cache.

Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls")
Reported-by: rsiddoji@codeaurora.org
Suggested-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>