Jianglei Nie c93017c8d5 crypto: ccree - Fix use after free in cc_cipher_exit() ...

[ Upstream commit 3d950c3407 ]

kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But
ctx_p->user.key is still used in the next line, which will lead to a
use after free.

We can call kfree_sensitive() after dev_dbg() to avoid the uaf.

Fixes: 63ee04c8b4 ("crypto: ccree - add skcipher support")
Signed-off-by: Jianglei Nie <niejianglei2021@163.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-04-08 14:40:02 +02:00

..

cc_aead.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

cc_aead.h

crypto: ccree - refactor AEAD IV in AAD handling

2020-03-12 23:00:16 +11:00

cc_buffer_mgr.c

crypto: ccree - don't attempt 0 len DMA mappings

2022-04-08 14:40:00 +02:00

cc_buffer_mgr.h

crypto: ccree - use u32 for SRAM addresses

2020-02-22 09:25:44 +08:00

cc_cipher.c

crypto: ccree - Fix use after free in cc_cipher_exit()

2022-04-08 14:40:02 +02:00

cc_cipher.h

crypto: ccree - copyright header update

2019-04-25 15:38:14 +08:00

cc_crypto_ctx.h

crypto: ccree - remove bitlocker cipher

2020-08-21 14:45:28 +10:00

cc_debugfs.c

crypto: ccree - constify struct debugfs_reg32

2020-05-15 16:15:00 +10:00

cc_debugfs.h

crypto: ccree - copyright header update

2019-04-25 15:38:14 +08:00

cc_driver.c

crypto: ccree - Simplify with dev_err_probe()

2020-09-04 17:57:16 +10:00

cc_driver.h

crypto: ccree - remove data unit size support

2020-08-21 14:45:28 +10:00

cc_fips.c

crypto: ccree - fix typos in comments

2019-12-11 16:36:54 +08:00

cc_fips.h

crypto: ccree - add function to handle cryptocell tee fips error

2019-04-25 15:38:16 +08:00

cc_hash.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

cc_hash.h

crypto: ccree - improve kerneldoc in cc_hash.[ch]

2020-02-22 09:25:45 +08:00

cc_host_regs.h

crypto: ccree - add HW engine config check

2019-06-27 14:28:00 +08:00

cc_hw_queue_defs.h

crypto: ccree - update register handling macros

2020-03-12 23:00:16 +11:00

cc_kernel_regs.h

crypto: ccree - copyright header update

2019-04-25 15:38:14 +08:00

cc_lli_defs.h

crypto: ccree - allow more AEAD assoc data fragments

2019-04-25 15:38:15 +08:00

cc_pm.c

crypto: ccree - fix runtime PM imbalance on error

2020-08-28 16:58:30 +10:00

cc_pm.h

crypto: ccree - make cc_pm_{suspend,resume}() static

2020-02-22 09:25:44 +08:00

cc_request_mgr.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

cc_request_mgr.h

crypto: ccree - improve kerneldoc in cc_request_mgr.[ch]

2020-02-22 09:25:46 +08:00

cc_sram_mgr.c

crypto: ccree - improve kerneldoc in cc_sram_mgr.[ch]

2020-02-22 09:25:46 +08:00

cc_sram_mgr.h

crypto: ccree - improve kerneldoc in cc_sram_mgr.[ch]

2020-02-22 09:25:46 +08:00

Makefile

crypto: ccree - drop legacy ivgen support

2019-07-26 14:51:55 +10:00