Thread (3 messages) 3 messages, 3 authors, 2021-12-31

Re: [Linux-stm32] [PATCH] crypto: stm32/crc32 - Fix kernel BUG triggered in probe()

flat view

From: Nicolas Toromanoff <hidden>
Date: 2021-12-21 08:13:44
Also in: linux-arm-kernel, stable

On Mon, 20 Dec 2021, Marek Vasut wrote:
The include/linux/crypto.h struct crypto_alg field cra_driver_name description
states "Unique name of the transformation provider. " ... " this contains the
name of the chip or provider and the name of the transformation algorithm."

In case of the stm32-crc driver, field cra_driver_name is identical for all
registered transformation providers and set to the name of the driver itself,
which is incorrect. This patch fixes it by assigning a unique cra_driver_name
to each registered transformation provider.

The kernel crash is triggered when the driver calls crypto_register_shashes()
which calls crypto_register_shash(), which calls crypto_register_alg(), which
calls __crypto_register_alg(), which returns -EEXIST, which is propagated
back through this call chain. Upon -EEXIST from crypto_register_shash(), the
crypto_register_shashes() starts unregistering the providers back, and calls
crypto_unregister_shash(), which calls crypto_unregister_alg(), and this is
where the BUG() triggers due to incorrect cra_refcnt.

Fixes: b51dbe90912a ("crypto: stm32 - Support for STM32 CRC32 crypto module")
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: <redacted> # 4.12+
Cc: Alexandre Torgue <alexandre.torgue@foss.st.com>
Cc: Fabien Dessenne <redacted>
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Cc: Lionel Debieve <redacted>
Cc: Nicolas Toromanoff <redacted>
Cc: <redacted>
Cc: <redacted>
To: <redacted>
---
drivers/crypto/stm32/stm32-crc32.c | 4 ++--
Hello Marek,

Thanks for the fix.

Acked-by: Nicolas Toromanoff <redacted>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help