projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 616ce45) | patch
crypto: bcm - Fix pointer arithmetic
authorAleksandr Mishin <amishin@t-argos.ru>
Fri, 22 Mar 2024 20:59:15 +0000 (23:59 +0300)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 2 Apr 2024 02:49:39 +0000 (10:49 +0800)
commit2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9
tree0c3362094dc08d1cecacf1243a9ccb60496081b6tree | snapshot
parent616ce45c150fa65683c8c1b1f2e2ac930462868dcommit | diff
crypto: bcm - Fix pointer arithmetic

In spu2_dump_omd() value of ptr is increased by ciph_key_len
instead of hash_iv_len which could lead to going beyond the
buffer boundaries.
Fix this bug by changing ciph_key_len to hash_iv_len.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 9d12ba86f818 ("crypto: brcm - Add Broadcom SPU driver")
Signed-off-by: Aleksandr Mishin <amishin@t-argos.ru>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/crypto/bcm/spu2.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git