Chengfeng Ye d8002fab3e crypto: qce - fix uaf on qce_ahash_register_one ...

[ Upstream commit b4cb4d31631912842eb7dce02b4350cbb7562d5e ]

Pointer base points to sub field of tmpl, it
is dereferenced after tmpl is freed. Fix
this by accessing base before free tmpl.

Fixes: ec8f5d8f ("crypto: qce - Qualcomm crypto engine driver")
Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk>
Acked-by: Thara Gopinath <thara.gopinath@linaro.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-01-27 09:00:49 +01:00

..

amcc

crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() arguments

2020-01-27 14:46:15 +01:00

axis

crypto: artpec6 - return correct error code for failed setkey()

2020-02-14 16:32:23 -05:00

bcm

crypto: bcm - Rename struct device_private to bcm_device_private

2021-03-03 18:22:42 +01:00

caam

crypto: caam - update xts sector size for large input length

2020-04-24 08:00:49 +02:00

cavium

crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified

2020-08-21 09:48:14 +02:00

ccp

crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

2021-10-06 15:05:10 +02:00

chelsio

Crypto/chcr: fix for ccm(aes) failed test

2020-06-20 10:25:11 +02:00

inside-secure

…

marvell

…

mediatek

cypto: mediatek - fix leaks in mtk_desc_ring_alloc

2020-10-29 09:07:02 +01:00

nx

crypto: nx - Fix RCU warning in nx842_OF_upd_status

2021-07-20 16:17:35 +02:00

qat

crypto: qat - disregard spurious PFVF interrupts

2021-11-26 11:40:30 +01:00

qce

crypto: qce - fix uaf on qce_ahash_register_one

2022-01-27 09:00:49 +01:00

rockchip

crypto: rockchip - update IV buffer to contain the next IV

2019-05-21 18:50:15 +02:00

stm32

crypto: stm32/hash - Fix hmac issue more than 256 bytes

2019-12-05 15:38:29 +01:00

sunxi-ss

crypto: sun4i-ss - handle BigEndian for cipher

2021-03-03 18:22:53 +01:00

ux500

crypto: ux500 - Fix error return code in hash_hw_final()

2021-07-20 16:17:34 +02:00

virtio

crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req()

2020-06-20 10:25:04 +02:00

vmx

crypto: vmx - Avoid weird build failures

2019-12-31 12:37:50 +01:00

atmel-aes-regs.h

…

atmel-aes.c

crypto: atmel-aes - Fix counter overflow in CTR mode

2020-02-14 16:32:14 -05:00

atmel-authenc.h

…

atmel-ecc.c

…

atmel-ecc.h

…

atmel-sha-regs.h

…

atmel-sha.c

crypto: atmel-sha - fix error handling when setting hmac key

2020-02-14 16:32:23 -05:00

atmel-tdes-regs.h

…

atmel-tdes.c

…

bfin_crc.c

…

bfin_crc.h

…

exynos-rng.c

…

geode-aes.c

…

geode-aes.h

…

hifn_795x.c

…

img-hash.c

…

ixp4xx_crypto.c

crypto: ixp4xx - dma_unmap the correct address

2021-07-20 16:17:34 +02:00

Kconfig

crypto: bcm - convert to use crypto_authenc_extractkeys()

2019-01-23 08:09:47 +01:00

Makefile

…

mv_cesa.c

…

mv_cesa.h

…

mxc-scc.c

crypto: mxc-scc - fix build warnings on ARM64

2019-12-05 15:37:47 +01:00

mxs-dcp.c

crypto: mxs-dcp - Use sg_mapping_iter to copy data

2021-09-22 11:45:27 +02:00

n2_asm.S

…

n2_core.c

…

n2_core.h

…

omap-aes-gcm.c

…

omap-aes.c

crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe

2020-12-29 13:46:54 +01:00

omap-aes.h

…

omap-crypto.c

…

omap-crypto.h

…

omap-des.c

…

omap-sham.c

crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()

2021-09-22 11:45:17 +02:00

padlock-aes.c

…

padlock-sha.c

…

picoxcell_crypto_regs.h

…

picoxcell_crypto.c

crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill

2020-02-14 16:32:14 -05:00

s5p-sss.c

crypto: s5p-sss: Fix Fix argument list alignment

2019-11-20 18:00:47 +01:00

sahara.c

…

talitos.c

crypto: talitos - fix max key size for sha384 and sha512

2021-09-26 13:37:28 +02:00

talitos.h

…