]> www.infradead.org Git - users/jedix/linux-maple.git/commit
crypto: sha1-mb - use corrcet pointer while completing jobs
authorXiaodong Liu <xiaodong.liu@intel.com>
Tue, 12 Apr 2016 09:45:51 +0000 (09:45 +0000)
committerDhaval Giani <dhaval.giani@oracle.com>
Fri, 20 Jan 2017 22:21:48 +0000 (17:21 -0500)
commit9b59dc509e0ed61099da3b71b209340c3f45ee07
tree1066708f7f17290a3af5d8a6c29878eacfd2ab24
parenta3dbeab3e5444e2927e17b2929f9694a2484bd71
crypto: sha1-mb - use corrcet pointer while completing jobs

Orabug: 25227128

[ Upstream commit 0851561d9c965df086ef8a53f981f5f95a57c2c8 ]

In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
when check and complete other jobs. If the memory of first completed req
is freed, while still completing other jobs in the func, kernel will
crash since NULL pointer is assigned to RIP.

Cc: <stable@vger.kernel.org>
Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
(cherry picked from commit f6a93797957220ead95f575047f43e1d4d085205)

Signed-off-by: Dhaval Giani <dhaval.giani@oracle.com>
arch/x86/crypto/sha-mb/sha1_mb.c