Thread (5 messages) 5 messages, 2 authors, 2016-02-06

Re: [PATCH] fix out of bound read in __test_aead()

From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2016-02-01 14:26:47
Also in: lkml

On Fri, Jan 29, 2016 at 02:10:09PM +0100, Jerome Marchand wrote:
__test_aead() reads MAX_IVLEN bytes from template[i].iv, but the
actual length of the initialisation vector can be shorter.
The length of the IV is already calculated earlier in the
function. Let's just reuses that.
This fix an out-of-bound error detected by KASan.

Signed-off-by: Jerome Marchand <redacted>
This patch creates a new warning that iv_len may be uninitialised.

Please fix this and resubmit.

Thanks,
-- 
Email: Herbert Xu [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help