]> www.infradead.org Git - users/jedix/linux-maple.git/commit
crypto: gcm - fix assumption that assoc has one segment
authorJussi Kivilinna <jussi.kivilinna@iki.fi>
Thu, 28 Mar 2013 19:54:03 +0000 (21:54 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 12 Apr 2013 16:52:09 +0000 (09:52 -0700)
commit3222024c5c7837995c88d0dbb4c2f7b49b62ec05
tree29bfb957feeb00d349d3a65f04b83bb808dad0e5
parent2dc505a8ed6538f9b8568621f147a440d0cd0d3a
crypto: gcm - fix assumption that assoc has one segment

commit d3dde52209ab571e4e2ec26c66f85ad1355f7475 upstream.

rfc4543(gcm(*)) code for GMAC assumes that assoc scatterlist always contains
only one segment and only makes use of this first segment. However ipsec passes
assoc with three segments when using 'extended sequence number' thus in this
case rfc4543(gcm(*)) fails to function correctly. Patch fixes this issue.

Reported-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Tested-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/gcm.c