diff options
author | Sebastian Siewior <sebastian@breakpoint.cc> | 2007-08-03 08:33:47 -0400 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2007-08-06 03:33:56 -0400 |
commit | 06817176784f620984200dc5d7cbe16984f7b262 (patch) | |
tree | 42de1788711cff6832c99a4f6a6518bb4f316935 /crypto/ablkcipher.c | |
parent | d4ac2477fad0f2680e84ec12e387ce67682c5c13 (diff) |
[CRYPTO] api: fix writting into unallocated memory in setkey_aligned
setkey_unaligned() commited in ca7c39385ce1a7b44894a4b225a4608624e90730
overwrites unallocated memory in the following memset() because
I used the wrong buffer length.
Signed-off-by: Sebastian Siewior <sebastian@breakpoint.cc>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/ablkcipher.c')
-rw-r--r-- | crypto/ablkcipher.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/ablkcipher.c b/crypto/ablkcipher.c index 1c166b47b4cc..3dbb1cc6eab5 100644 --- a/crypto/ablkcipher.c +++ b/crypto/ablkcipher.c | |||
@@ -35,7 +35,7 @@ static int setkey_unaligned(struct crypto_ablkcipher *tfm, const u8 *key, unsign | |||
35 | alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1); | 35 | alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1); |
36 | memcpy(alignbuffer, key, keylen); | 36 | memcpy(alignbuffer, key, keylen); |
37 | ret = cipher->setkey(tfm, alignbuffer, keylen); | 37 | ret = cipher->setkey(tfm, alignbuffer, keylen); |
38 | memset(alignbuffer, 0, absize); | 38 | memset(alignbuffer, 0, keylen); |
39 | kfree(buffer); | 39 | kfree(buffer); |
40 | return ret; | 40 | return ret; |
41 | } | 41 | } |