]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: lrw - Fix out-of bounds access on counter overflow
authorOndrej Mosnacek <omosnace@redhat.com>
Thu, 13 Sep 2018 08:51:31 +0000 (10:51 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 13 Nov 2018 19:08:45 +0000 (11:08 -0800)
commitc2ff394968b000d2e5cf692cab2865f66606761c
tree9478dd8eea8f5d8ac0177874f90fe343eb79db87
parent04eb71942e858c840d1e3a63d81d9bec83b157c5
crypto: lrw - Fix out-of bounds access on counter overflow

commit fbe1a850b3b1522e9fc22319ccbbcd2ab05328d2 upstream.

When the LRW block counter overflows, the current implementation returns
128 as the index to the precomputed multiplication table, which has 128
entries. This patch fixes it to return the correct value (127).

Fixes: 64470f1b8510 ("[CRYPTO] lrw: Liskov Rivest Wagner, a tweakable narrow block cipher mode")
Cc: <stable@vger.kernel.org> # 2.6.20+
Reported-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/lrw.c