aboutsummaryrefslogtreecommitdiff
path: root/drivers/s390
diff options
context:
space:
mode:
authorHerbert Xu <herbert@gondor.apana.org.au>2008-08-23 01:04:06 +1000
committerHerbert Xu <herbert@gondor.apana.org.au>2008-08-23 01:04:06 +1000
commita697690bece75d4ba424c1318eb25c37d41d5829 (patch)
tree0ff76eb4486bfa02708ea9a19d330b68bde83a81 /drivers/s390
parent0c7281c0faa1d0bdbdc647430cbdf7e0aed7f385 (diff)
crypto: authenc - Avoid using clobbered request pointer
Authenc works in two stages for encryption, it first encrypts and then computes an ICV. The context memory of the request is used by both operations. The problem is that when an asynchronous encryption completes, we will compute the ICV and then reread the context memory of the encryption to get the original request. It just happens that we have a buffer of 16 bytes in front of the request pointer, so ICVs of 16 bytes (such as SHA1) do not trigger the bug. However, any attempt to uses a larger ICV instantly kills the machine when the first asynchronous encryption is completed. This patch fixes this by saving the request pointer before we start the ICV computation. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'drivers/s390')
0 files changed, 0 insertions, 0 deletions