]> git.ipfire.org Git - people/arne_f/kernel.git/commit
crypto: gcm - fix assumption that assoc has one segment
authorJussi Kivilinna <jussi.kivilinna@iki.fi>
Thu, 28 Mar 2013 19:54:03 +0000 (21:54 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 12 Apr 2013 16:18:09 +0000 (09:18 -0700)
commit6ef51ab472a28f8c8206512ad02dd0b9bf1d0c61
treeea0fe2ec515a0efb89bdaa02c17c37a6f81ce707
parent17229e4f8ef6a7cb514d7d4d67197cd6a8b06eca
crypto: gcm - fix assumption that assoc has one segment

commit d3dde52209ab571e4e2ec26c66f85ad1355f7475 upstream.

rfc4543(gcm(*)) code for GMAC assumes that assoc scatterlist always contains
only one segment and only makes use of this first segment. However ipsec passes
assoc with three segments when using 'extended sequence number' thus in this
case rfc4543(gcm(*)) fails to function correctly. Patch fixes this issue.

Reported-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Tested-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/gcm.c