Ard Biesheuvel 9246fd26f9 crypto: arm/aes-ctr - fix NULL dereference in tail processing ... commit f82e90b28654804ab72881d577d87c3d5c65e2bc upstream. The AES-CTR glue code avoids calling into the blkcipher API for the tail portion of the walk, by comparing the remainder of walk.nbytes modulo AES_BLOCK_SIZE with the residual nbytes, and jumping straight into the tail processing block if they are equal. This tail processing block checks whether nbytes != 0, and does nothing otherwise. However, in case of an allocation failure in the blkcipher layer, we may enter this code with walk.nbytes == 0, while nbytes > 0. In this case, we should not dereference the source and destination pointers, since they may be NULL. So instead of checking for nbytes != 0, check for (walk.nbytes % AES_BLOCK_SIZE) != 0, which implies the former in non-error conditions. Fixes: 86464859cc ("crypto: arm - AES in ECB/CBC/CTR/XTS modes using ARMv8 Crypto Extensions") Reported-by: xiakaixu <xiakaixu@huawei.com> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-09-30 10:18:34 +02:00
..
boot	ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST SDHCI	2016-09-24 10:07:40 +02:00
common	ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()	2016-02-25 12:01:19 -08:00
configs	ARM: Fix broken USB support in multi_v7_defconfig for sunxi devices	2016-01-07 16:02:19 +01:00
crypto	crypto: arm/aes-ctr - fix NULL dereference in tail processing	2016-09-30 10:18:34 +02:00
firmware
include	ARM: 8579/1: mm: Fix definition of pmd_mknotpresent	2016-07-27 09:47:30 -07:00
kernel	arm: oabi compat: add missing access checks	2016-08-16 09:30:48 +02:00
kvm	kvm-arm: Unmap shadow pagetables properly	2016-09-24 10:07:37 +02:00
lib	ARM: fix uaccess_with_memcpy() with SW_DOMAIN_PAN	2015-12-15 11:51:02 +00:00
mach-alpine
mach-asm9260
mach-at91	ARM: at91: fix pinctrl driver selection	2015-12-04 18:54:53 +01:00
mach-axxia
mach-bcm	ARM: SoC platform updates for v4.4	2015-11-10 14:56:23 -08:00
mach-berlin
mach-clps711x
mach-cns3xxx	CNS3xxx: Fix PCI cns3xxx_write_config()	2016-05-11 11:21:11 +02:00
mach-davinci	ARM: SoC non-urgent fixes for v4.4	2015-11-10 14:45:05 -08:00
mach-digicolor
mach-dove	ARM: dove: Fix legacy get_irqnr_and_base	2015-11-25 14:59:12 +00:00
mach-ebsa110
mach-efm32
mach-ep93xx
mach-exynos	ARM: EXYNOS: Properly skip unitialized parent clock in power domain on	2016-05-11 11:21:14 +02:00
mach-footbridge
mach-gemini	ARM: gemini: remove unnecessary mdio-gpio includes	2015-10-21 19:50:43 -07:00
mach-highbank
mach-hisi
mach-imx	ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx	2016-09-24 10:07:39 +02:00
mach-integrator
mach-iop13xx
mach-iop32x
mach-iop33x
mach-ixp4xx	ARM: ixp4xx: fix read{b,w,l} return types	2015-12-01 23:45:30 +01:00
mach-keystone
mach-ks8695
mach-lpc18xx
mach-lpc32xx
mach-mediatek	ARM: SoC platform updates for v4.4	2015-11-10 14:56:23 -08:00
mach-meson
mach-mmp
mach-moxart
mach-mv78xx0
mach-mvebu	ARM: mvebu: fix HW I/O coherency related deadlocks	2016-07-27 09:47:39 -07:00
mach-mxs
mach-netx
mach-nomadik
mach-nspire
mach-omap1
mach-omap2	ARM: OMAP3: hwmod data: Add sysc information for DSI	2016-09-24 10:07:40 +02:00
mach-orion5x	ARM: orion5x: Fix legacy get_irqnr_and_base	2015-11-25 15:01:00 +00:00
mach-picoxcell
mach-prima2	ARM: prima2: always enable reset controller	2016-05-04 14:48:53 -07:00
mach-pxa	ARM: pxa: use PWM lookup table for all machines	2015-12-11 00:27:58 +01:00
mach-qcom	ARM: Remove __ref on hotplug cpu die path	2015-10-22 09:55:03 -07:00
mach-realview	ARM: Remove __ref on hotplug cpu die path	2015-10-22 09:55:03 -07:00
mach-rockchip
mach-rpc
mach-s3c24xx	cpufreq: s3c24xx: Do not mark s3c2410_plls_add as __init	2015-11-27 10:10:32 +09:00
mach-s3c64xx	ASoC: samsung: pass DMA channels as pointers	2016-04-12 09:08:32 -07:00
mach-s5pv210
mach-sa1100
mach-shmobile	ARM: shmobile: r8a7793: proper constness with __initconst	2015-11-22 17:13:13 -08:00
mach-socfpga	ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel	2016-05-11 11:21:14 +02:00
mach-spear	ARM: SoC cleanups for v4.4	2015-11-10 14:48:36 -08:00
mach-sti
mach-stm32
mach-sunxi	ARM: SoC platform updates for v4.4	2015-11-10 14:56:23 -08:00
mach-tegra	ARM: SoC platform updates for v4.4	2015-11-10 14:56:23 -08:00
mach-u300	spi: Updates for v4.4	2015-11-05 13:15:12 -08:00
mach-uniphier	ARM: uniphier: rework SMP operations to use trampoline code	2015-10-27 09:20:53 +09:00
mach-ux500	ARM: SoC cleanups for v4.4	2015-11-10 14:48:36 -08:00
mach-versatile
mach-vexpress	ARM: Remove __ref on hotplug cpu die path	2015-10-22 09:55:03 -07:00
mach-vt8500
mach-w90x900
mach-zx	ARM: zx: only build power domain code when CONFIG_PM=y	2015-11-19 16:16:45 +01:00
mach-zynq
mm	Merge branch 'libnvdimm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm	2015-12-17 11:20:13 -08:00
net	ARM: net: bpf: fix zero right shift	2016-01-06 01:32:09 -05:00
nwfpe
oprofile
plat-iop
plat-omap
plat-orion
plat-pxa
plat-samsung	ASoC: samsung: pass DMA channels as pointers	2016-04-12 09:08:32 -07:00
plat-versatile
probes
tools
vdso	ARM: 8449/1: fix bug in vdsomunge swab32 macro	2015-10-29 15:20:15 +00:00
vfp
xen	mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd	2015-11-06 17:50:42 -08:00
Kconfig	ARM: 8454/1: OF implies OF_FLATTREE	2015-11-28 23:26:12 +00:00
Kconfig-nommu
Kconfig.debug	ARM: debug-ll: fix BCM63xx entry for multiplatform	2016-03-03 15:07:08 -08:00
Makefile