Re: crypto: use-after-free in hash_sock_destruct_common
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2016-01-13 06:57:40
Also in:
lkml
On Tue, Jan 12, 2016 at 07:31:03PM +0100, Dmitry Vyukov wrote:
The following program triggers use-after-free in hash_sock_destruct_common. This is on master of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git (cd7e98414462b9db70067ac29896c58210b13b69). I've also seen a similar crash in skcipher_sock_destruct_common.
OK the new compatibility nokey path introduced some new problems. Please try the following patches. Thanks, -- Email: Herbert Xu [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt