projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aa4a829) | patch
crypto: lrw - Fix use-after-free on EINPROGRESS
authorHerbert Xu <herbert@gondor.apana.org.au>
Mon, 10 Apr 2017 09:15:48 +0000 (17:15 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Mon, 10 Apr 2017 11:09:17 +0000 (19:09 +0800)
commit4702bbeefb490e315189636a5588628c1151223d
treec0c35538cd7fc5c2ea5041171440157cea22055btree | snapshot (tar.gz zip)
parentaa4a829bdaced81e70c215a84ef6595ce8bd4308commit | diff
crypto: lrw - Fix use-after-free on EINPROGRESS

When we get an EINPROGRESS completion in lrw, we will end up marking
the request as done and freeing it.  This then blows up when the
request is really completed as we've already freed the memory.

Fixes: 700cb3f5fe75 ("crypto: lrw - Convert to skcipher")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/lrw.c diff | blob | blame | history