1 files changed, 4 insertions, 0 deletions

diff --git a/security/selinux/ss/conditional.c b/security/selinux/ss/conditional.c
index d2737edba541..45b93a827c80 100644
--- a/security/selinux/ss/conditional.c
+++ b/security/selinux/ss/conditional.c
@@ -456,6 +456,10 @@ int cond_read_list(struct policydb *p, void *fp)
 
         len = le32_to_cpu(buf[0]);
 
+        rc = avtab_alloc(&(p->te_cond_avtab), p->te_avtab.nel);
+        if (rc)
+                goto err;
+
         for (i = 0; i < len; i++) {
                 node = kzalloc(sizeof(struct cond_node), GFP_KERNEL);
                 if (!node)