Thread (1 message) 1 message, 1 author, 2016-01-13

Re: crypto: use-after-free in hash_sock_destruct_common

From: Dmitry Vyukov <dvyukov@google.com>
Date: 2016-01-13 10:27:44
Also in: lkml

On Wed, Jan 13, 2016 at 11:25 AM, Dmitry Vyukov [off-list ref] wrote:
On Wed, Jan 13, 2016 at 7:57 AM, Herbert Xu [off-list ref]
wrote:
quoted
On Tue, Jan 12, 2016 at 07:31:03PM +0100, Dmitry Vyukov wrote:
quoted
The following program triggers use-after-free in
hash_sock_destruct_common. This is on master of
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git
(cd7e98414462b9db70067ac29896c58210b13b69). I've also seen a similar
crash in skcipher_sock_destruct_common.
OK the new compatibility nokey path introduced some new problems.
Please try the following patches.

Yes, these 4 patches fix the crash for me. Thanks for quick fix!

Tested-by: Dmitry Vyukov <dvyukov@google.com>
Oops, resending as plain text.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help