linux-kernel - Re: [v2 PATCH] crypto: seqiv - Do not use req->iv after crypto_aead

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CADvbK_dORpkN7Gu-xP7WyEcCJmzn6Cr-Fu5_1aHB5Bp=Ahzcrw@mail.gmail.com>
Date: Wed, 31 Dec 2025 16:06:48 -0500
From: Xin Long <lucien.xin@...il.com>
To: Herbert Xu <herbert@...dor.apana.org.au>
Cc: linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org, 
	"David S . Miller" <davem@...emloft.net>, Steffen Klassert <steffen.klassert@...unet.com>
Subject: Re: [v2 PATCH] crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

On Sun, Dec 21, 2025 at 8:47 PM Herbert Xu <herbert@...dor.apana.org.au> wrote:
>
> On Fri, Dec 19, 2025 at 12:58:49PM -0500, Xin Long wrote:
> >
> > Which upstream git repo will this patch be applied to?
>
> I intend to push this to Linus for 6.19.
>
BTW, Do you think it might have the similar issue in essiv_aead_crypt()?

        if (rctx->assoc && err != -EINPROGRESS && err != -EBUSY)
                kfree(rctx->assoc);

since rctx comes from req.

Thanks.