diff options
author | Eric Biggers <ebiggers@google.com> | 2016-11-14 02:41:09 +0100 |
---|---|---|
committer | Theodore Ts'o <tytso@mit.edu> | 2016-11-14 03:56:25 +0100 |
commit | a6e08912861757b8b335cc49b093a51ec025c5de (patch) | |
tree | eae324f8eb4f949bc8b21fa8acc56b6ec0521014 /MAINTAINERS | |
parent | fscrypto: don't use on-stack buffer for filename encryption (diff) | |
download | linux-a6e08912861757b8b335cc49b093a51ec025c5de.tar.xz linux-a6e08912861757b8b335cc49b093a51ec025c5de.zip |
fscrypto: don't use on-stack buffer for key derivation
With the new (in 4.9) option to use a virtually-mapped stack
(CONFIG_VMAP_STACK), stack buffers cannot be used as input/output for
the scatterlist crypto API because they may not be directly mappable to
struct page. get_crypt_info() was using a stack buffer to hold the
output from the encryption operation used to derive the per-file key.
Fix it by using a heap buffer.
This bug could most easily be observed in a CONFIG_DEBUG_SG kernel
because this allowed the BUG in sg_set_buf() to be triggered.
Cc: stable@vger.kernel.org
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Diffstat (limited to 'MAINTAINERS')
0 files changed, 0 insertions, 0 deletions