Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1607888

Re: crypto: out-of-bounds write in pre_crypt

From Eric Biggers <ebiggers3@gmail.com>
Newsgroups linux.kernel
Subject Re: crypto: out-of-bounds write in pre_crypt
Date 2017-03-23 21:40 +0100
Message-ID <tohGy-7w7-27@gated-at.bofh.it> (permalink)
References <to8Df-14F-21@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Hi Dmitry,

On Thu, Mar 23, 2017 at 11:51:30AM +0100, Dmitry Vyukov wrote:
> Hello,
> 
> I've got the following report while running syzkaller fuzzer.
> init_crypt ignores kmalloc failure, which later leads to out-of-bounds
> writes in ptr_crypt. On commit
> 093b995e3b55a0ae0670226ddfcb05bfbf0099ae.
> 

Thanks for finding this!  Nice to see that the crypto code is getting tested...

This bug was introduced in v4.10 and affects the generic XTS and LRW drivers.
They are supposed to work in the event of a kmalloc failure, but evidently it's
broken.  I'm sending a patch shortly.

- Eric

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

crypto: out-of-bounds write in pre_crypt Dmitry Vyukov <dvyukov@google.com> - 2017-03-23 12:00 +0100
  Re: crypto: out-of-bounds write in pre_crypt Eric Biggers <ebiggers3@gmail.com> - 2017-03-23 21:40 +0100
  [PATCH] crypto: xts,lrw - fix out-of-bounds write after kmalloc failure Eric Biggers <ebiggers3@gmail.com> - 2017-03-23 21:50 +0100
    Re: [PATCH] crypto: xts,lrw - fix out-of-bounds write after  kmalloc failure David Miller <davem@davemloft.net> - 2017-03-23 22:10 +0100
    Re: [PATCH] crypto: xts,lrw - fix out-of-bounds write after kmalloc  failure Herbert Xu <herbert@gondor.apana.org.au> - 2017-03-24 15:20 +0100

csiph-web