Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1299189

Re: crypto: use-after-free in alg_bind

From Herbert Xu <herbert@gondor.apana.org.au>
Newsgroups linux.kernel
Subject Re: crypto: use-after-free in alg_bind
Date 2015-12-30 02:30 +0100
Message-ID <qLdKq-8cX-5@gated-at.bofh.it> (permalink)
References <qL8Uq-5fn-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Tue, Dec 29, 2015 at 09:19:22PM +0100, Dmitry Vyukov wrote:
> Hello,
> 
> On commit 8513342170278468bac126640a5d2d12ffbff106
> + crypto: algif_skcipher - Use new skcipher interface
> + crypto: algif_skcipher - Require setkey before accept(2)
> + crypto: af_alg - Disallow bind/setkey/... after accept(2)
> 
> The following program causes use-after-free in alg_bind and later
> terminates kernel:

Please double-check that you have the last patch applied correctly,
as I cannot reproduce the crash with your program.

Thanks,
-- 
Email: Herbert Xu <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

crypto: use-after-free in alg_bind Dmitry Vyukov <dvyukov@google.com> - 2015-12-29 21:20 +0100
  Re: crypto: use-after-free in alg_bind Herbert Xu <herbert@gondor.apana.org.au> - 2015-12-30 02:30 +0100
    Re: crypto: use-after-free in alg_bind Dmitry Vyukov <dvyukov@google.com> - 2015-12-30 11:30 +0100
      Re: crypto: use-after-free in alg_bind Herbert Xu <herbert@gondor.apana.org.au> - 2015-12-30 12:00 +0100
        Re: crypto: use-after-free in alg_bind Dmitry Vyukov <dvyukov@google.com> - 2015-12-30 12:00 +0100
          Re: crypto: use-after-free in alg_bind Herbert Xu <herbert@gondor.apana.org.au> - 2015-12-30 13:30 +0100
            Re: crypto: use-after-free in alg_bind Dmitry Vyukov <dvyukov@google.com> - 2015-12-30 13:50 +0100
              Re: crypto: use-after-free in alg_bind Herbert Xu <herbert@gondor.apana.org.au> - 2015-12-30 14:00 +0100

csiph-web