linux-kernel - Crypto Fixes for 4.11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170418102748.GA574@gondor.apana.org.au>
Date:   Tue, 18 Apr 2017 18:27:49 +0800
From:   Herbert Xu <herbert@...dor.apana.org.au>
To:     Linus Torvalds <torvalds@...ux-foundation.org>,
        "David S. Miller" <davem@...emloft.net>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Linux Crypto Mailing List <linux-crypto@...r.kernel.org>
Subject: Crypto Fixes for 4.11

Hi Linus:

This push fixes the following problems:

- Regression in new XTS/LRW code when used with async crypto.
- Long-standing bug in ahash API when used with certain algos.
- Bogus memory dereference in async algif_aead with certain algos.


Please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git linus


Herbert Xu (4):
      crypto: xts - Fix use-after-free on EINPROGRESS
      crypto: lrw - Fix use-after-free on EINPROGRESS
      crypto: ahash - Fix EINPROGRESS notification callback
      crypto: algif_aead - Fix bogus request dereference in completion function

 crypto/ahash.c                 |   79 +++++++++++++++++++++++++---------------
 crypto/algif_aead.c            |   12 +++---
 crypto/lrw.c                   |   16 ++++++++
 crypto/xts.c                   |   16 ++++++++
 include/crypto/internal/hash.h |   10 +++++
 5 files changed, 98 insertions(+), 35 deletions(-)

Thanks,
-- 
Email: Herbert Xu <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt