libsepol: 3.1 to master compatibility report

Test Info

Module Name	libsepol
Version #1	3.1
Version #2	master
Arch	x86_64
GCC Version	10.2.1
Subject	Binary Compatibility

Test Results

Total Header Files	35
Total Source Files	31
Total Objects	1
Total Symbols / Types	250 / 161
Compatibility	82.6%

Problem Summary

	Severity	Count
Added Symbols	-	0
Removed Symbols	High	5
Problems with Data Types	High	0
	Medium	2
	Low	2
Problems with Symbols	High	0
	Medium	0
	Low	0
Problems with Constants	Low	0

Removed Symbols 5

cil.h, libsepol.so.1
cil_build_policydb ( cil_db_t* db, sepol_policydb_t* sepol_db ) @ LIBSEPOL_1.0
cil_compile ( struct cil_db* db, sepol_policydb_t* sepol_db ) @ LIBSEPOL_1.0
cil_filecons_to_string ( struct cil_db* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) @ LIBSEPOL_1.0
cil_selinuxusers_to_string ( struct cil_db* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) @ LIBSEPOL_1.0
cil_userprefixes_to_string ( struct cil_db* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) @ LIBSEPOL_1.0

to the top

Problems with Data Types, Medium Severity 2

policydb.h
[+] struct policydb 1

	Change	Effect
1	Field filename_trans_count has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

[+] affected symbols: 77 (30.8%)

expand_module_avrules ( sepol_handle_t* handle, policydb_t* base, policydb_t* out, uint32_t* typemap, uint32_t* boolmap, uint32_t* rolemap, uint32_t* usermap, int verbose, int expand_neverallow )

2nd parameter 'base' (pointer) has base type 'struct policydb'.

sepol_bool_count ( sepol_handle_t* handle, sepol_policydb_t const* p, unsigned int* response )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_bool_exists ( sepol_handle_t* handle, sepol_policydb_t const* p, sepol_bool_key_t const* key, int* response )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_bool_iterate ( sepol_handle_t* handle, sepol_policydb_t const* p, int(*fn)(sepol_bool_t const*, void*), void* arg )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_bool_query ( sepol_handle_t* handle, sepol_policydb_t const* p, sepol_bool_key_t const* key, sepol_bool_t** response )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_bool_set ( sepol_handle_t* handle, sepol_policydb_t* p, sepol_bool_key_t const* key, sepol_bool_t const* data )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_context_check ( sepol_handle_t* handle, sepol_policydb_t const* policydb, sepol_context_t const* context )

Field 'policydb.p' in 2nd parameter 'policydb' (pointer) is of type 'struct policydb'.

sepol_expand_module ( sepol_handle_t* handle, sepol_policydb_t* base, sepol_policydb_t* out, int verbose, int check )

Field 'base.p' in 2nd parameter 'base' (pointer) is of type 'struct policydb'.

sepol_ibendport_count ( sepol_handle_t* handle, sepol_policydb_t const* p, unsigned int* response )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

sepol_ibendport_exists ( sepol_handle_t* handle, sepol_policydb_t const* p, sepol_ibendport_key_t const* key, int* response )

Field 'p.p' in 2nd parameter 'p' (pointer) is of type 'struct policydb'.

...

[+] struct sepol_policydb 1

	Change	Effect
1	Size of field p has been changed from 656 bytes to 664 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field may be broken.

[+] affected symbols: 73 (29.2%)

to the top

Problems with Data Types, Low Severity 2

policydb.h
[+] struct policydb 1

	Change	Effect
1	Size of this type has been changed from 656 bytes to 664 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.