projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aa4a829) | patch
crypto: lrw - Fix use-after-free on EINPROGRESS
authorHerbert Xu <herbert@gondor.apana.org.au>
Mon, 10 Apr 2017 09:15:48 +0000 (17:15 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Mon, 10 Apr 2017 11:09:17 +0000 (19:09 +0800)
commit4702bbeefb490e315189636a5588628c1151223d
treec0c35538cd7fc5c2ea5041171440157cea22055btree | snapshot
parentaa4a829bdaced81e70c215a84ef6595ce8bd4308commit | diff
crypto: lrw - Fix use-after-free on EINPROGRESS

When we get an EINPROGRESS completion in lrw, we will end up marking
the request as done and freeing it.  This then blows up when the
request is really completed as we've already freed the memory.

Fixes: 700cb3f5fe75 ("crypto: lrw - Convert to skcipher")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/lrw.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git