crypto: inside-secure - fix the sha state length in hmac_sha1_setkey
authorAntoine Ténart <antoine.tenart@free-electrons.com>
Wed, 19 Jul 2017 09:02:31 +0000 (11:02 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Thu, 3 Aug 2017 05:36:11 +0000 (13:36 +0800)
A check is performed on the ipad/opad in the safexcel_hmac_sha1_setkey
function, but the index used by the loop doing it is wrong. It is
currently the size of the state array while it should be the size of a
sha1 state. This patch fixes it.

Fixes: 1b44c5a60c13 ("crypto: inside-secure - add SafeXcel EIP197 crypto engine driver")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Antoine Tenart <antoine.tenart@free-electrons.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/crypto/inside-secure/safexcel_hash.c

index a11b2edb41b9b8cf288c9be5516cac0f2c11595b..3f819399cd95519a9956ed1d3ecba76fa2aa62b4 100644 (file)
@@ -883,7 +883,7 @@ static int safexcel_hmac_sha1_setkey(struct crypto_ahash *tfm, const u8 *key,
        if (ret)
                return ret;
 
-       for (i = 0; i < ARRAY_SIZE(istate.state); i++) {
+       for (i = 0; i < SHA1_DIGEST_SIZE / sizeof(u32); i++) {
                if (ctx->ipad[i] != le32_to_cpu(istate.state[i]) ||
                    ctx->opad[i] != le32_to_cpu(ostate.state[i])) {
                        ctx->base.needs_inv = true;