summaryrefslogtreecommitdiff
path: root/usr
diff options
context:
space:
mode:
authorJoy Latten <latten@austin.ibm.com>2008-03-06 14:28:44 +0300
committerHerbert Xu <herbert@gondor.apana.org.au>2008-03-06 14:28:44 +0300
commit2f40a178e70030c4712fe63807c883f34c3645eb (patch)
tree8b84e1c7a18df7c134d32cbe587cd6d88c9e942e /usr
parent6212f2c7f70c591efb0d9f3d50ad29112392fee2 (diff)
downloadlinux-2f40a178e70030c4712fe63807c883f34c3645eb.tar.xz
[CRYPTO] xcbc: Fix crash with IPsec
When using aes-xcbc-mac for authentication in IPsec, the kernel crashes. It seems this algorithm doesn't account for the space IPsec may make in scatterlist for authtag. Thus when crypto_xcbc_digest_update2() gets called, nbytes may be less than sg[i].length. Since nbytes is an unsigned number, it wraps at the end of the loop allowing us to go back into loop and causing crash in memcpy. I used update function in digest.c to model this fix. Please let me know if it looks ok. Signed-off-by: Joy Latten <latten@austin.ibm.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'usr')
0 files changed, 0 insertions, 0 deletions