scon = kmalloc(size+1, GFP_KERNEL); 
scon = kzalloc(size+1, GFP_KERNEL); 
static ssize_t sel_write_access(struct file * file, char *buf, size_t size){	char *scon, *tcon;	u32 ssid, tsid;	u16 tclass;	u32 req;	struct av_decision avd;	ssize_t length;	length = task_has_security(current, SECURITY__COMPUTE_AV);	if (length)		return length;	length = -ENOMEM;	scon = kmalloc(size+1, GFP_KERNEL);	if (!scon)		return length;	memset(scon, 0, size+1);	tcon = kmalloc(size+1, GFP_KERNEL);	if (!tcon)		goto out;	memset(tcon, 0, size+1);	length = -EINVAL;	if (sscanf(buf, "%s %s %hu %x", scon, tcon, &tclass, &req) != 4)		goto out2;	length = security_context_to_sid(scon, strlen(scon)+1, &ssid);	if (length < 0)		goto out2;	length = security_context_to_sid(tcon, strlen(tcon)+1, &tsid);	if (length < 0)		goto out2;	length = security_compute_av(ssid, tsid, tclass, req, &avd);	if (length < 0)		goto out2;	length = scnprintf(buf, SIMPLE_TRANSACTION_LIMIT,			  "%x %x %x %x %u",			  avd.allowed, avd.decided,			  avd.auditallow, avd.auditdeny,			  avd.seqno);out2:	kfree(tcon);out:	kfree(scon);	return length;}
4520	/local/tlutelli/issta_data/temp/c/2005_temp/2005/4520/89d155ef62e5e0c10e4b37aaa5056f0beafe10e6/selinuxfs.c/buggy/security/selinux/selinuxfs.c