Verify that checkpolicy and checkmodule abort cleanly when memory is exhausted during compilation, rather than producing a potentially incorrect output binary. The test constrains the virtual address space of the compiler subprocess to 8 MB via ulimit -v, which is sufficient for process startup but not for parsing a full targeted policy binary. Both compilers are exercised using binary input (checkpolicy -b, checkmodule -b) against the active policy store. Assertions: non-zero exit status and no output file produced under OOM. Tested on RHEL 9, RHEL 10, and RHIVOS 2.0 on x86_64 and aarch64. VROOM-40721 |
||
|---|---|---|
| .. | ||
| checkmodule | ||
| checkpolicy | ||
| checkpolicy-docs | ||
| internal-tests | ||
| oom-compiler-failure | ||
| sedismod | ||
| sedispol | ||