Robert Watson b4ef8be228 When allocation of labels on files is implicitly disabled due to MAC ... policy configuration, avoid leaking resources following failed calls to get and set MAC labels by file descriptor. Reported by: Mateusz Guzik <mjguzik at gmail.com> + clang scan-build MFC after: 3 days		2012-04-08 11:01:49 +00:00
..
mac_atalk.c
mac_audit.c
mac_cred.c
mac_framework.c	put sys/systm.h at its proper place or add it if missing	2011-12-12 10:05:13 +00:00
mac_framework.h	Correct several issues in the integration of POSIX shared memory objects	2011-09-02 17:40:39 +00:00
mac_inet6.c
mac_inet.c
mac_internal.h
mac_label.c
mac_net.c	- Improve BPF locking model.	2012-04-06 06:53:58 +00:00
mac_pipe.c
mac_policy.h	Correct several issues in the integration of POSIX shared memory objects	2011-09-02 17:40:39 +00:00
mac_posix_sem.c	Add the fo_chown and fo_chmod methods to struct fileops and use them	2011-08-16 20:07:47 +00:00
mac_posix_shm.c	Correct several issues in the integration of POSIX shared memory objects	2011-09-02 17:40:39 +00:00
mac_priv.c	Revert the approach for skipping lockstat_probe_func call when doing	2011-12-12 23:29:32 +00:00
mac_process.c	Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() are	2011-02-05 21:21:27 +00:00
mac_socket.c
mac_syscalls.c	When allocation of labels on files is implicitly disabled due to MAC	2012-04-08 11:01:49 +00:00
mac_system.c
mac_sysv_msg.c
mac_sysv_sem.c
mac_sysv_shm.c
mac_vfs.c