diff options
| author | Pan Bian <bianpan2016@163.com> | 2018-11-22 11:00:16 +0100 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2018-11-29 07:53:59 +0100 |
| commit | e5bde04ccce64d808f8b00a489a1fe5825d285cb (patch) | |
| tree | ff071a695559c7343c9ca04744794332368e0ecd /Documentation/firmware_class | |
| parent | crypto: user - Zeroize whole structure given to user space (diff) | |
| download | linux-e5bde04ccce64d808f8b00a489a1fe5825d285cb.tar.xz linux-e5bde04ccce64d808f8b00a489a1fe5825d285cb.zip | |
crypto: do not free algorithm before using
In multiple functions, the algorithm fields are read after its reference
is dropped through crypto_mod_put. In this case, the algorithm memory
may be freed, resulting in use-after-free bugs. This patch delays the
put operation until the algorithm is never used.
Fixes: 79c65d179a40 ("crypto: cbc - Convert to skcipher")
Fixes: a7d85e06ed80 ("crypto: cfb - add support for Cipher FeedBack mode")
Fixes: 043a44001b9e ("crypto: pcbc - Convert to skcipher")
Cc: <stable@vger.kernel.org>
Signed-off-by: Pan Bian <bianpan2016@163.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'Documentation/firmware_class')
0 files changed, 0 insertions, 0 deletions