]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: af_alg - fix possible uninit-value in alg_bind()
authorEric Dumazet <edumazet@google.com>
Sat, 7 Apr 2018 20:42:36 +0000 (13:42 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 16 May 2018 08:06:49 +0000 (10:06 +0200)
commit83231e0aae2c6bca967dbd05b0966908e908a036
tree5853ef48d26b93ea7e02d45b5d76f3d6ec055039
parent7ae1c4cb9f1f8cf0e5473d44b31778e644ae89b1
crypto: af_alg - fix possible uninit-value in alg_bind()

commit a466856e0b7ab269cdf9461886d007e88ff575b0 upstream.

syzbot reported :

BUG: KMSAN: uninit-value in alg_bind+0xe3/0xd90 crypto/af_alg.c:162

We need to check addr_len before dereferencing sa (or uaddr)

Fixes: bb30b8848c85 ("crypto: af_alg - whitelist mask and type")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Cc: Stephan Mueller <smueller@chronox.de>
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/af_alg.c