diff options
| author | Ondrej Mosnáček <omosnace@redhat.com> | 2018-06-13 16:44:17 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2018-06-15 23:06:48 +0800 |
| commit | a81ae8095712d1513fe8d58527c92c439b43233e (patch) | |
| tree | ba5545a359bc33638ace2a1468f4b3c8d5d53d70 /drivers/char | |
| parent | f044a84e040b85cd609851ac88ae8b54b2cc0b75 (diff) | |
| download | linux-a81ae8095712d1513fe8d58527c92c439b43233e.tar.bz2 | |
crypto: morus640 - Fix out-of-bounds access
We must load the block from the temporary variable here, not directly
from the input.
Also add forgotten zeroing-out of the uninitialized part of the
temporary block (as is done correctly in morus1280.c).
Fixes: 396be41f16fd ("crypto: morus - Add generic MORUS AEAD implementations")
Reported-by: syzbot+1fafa9c4cf42df33f716@syzkaller.appspotmail.com
Reported-by: syzbot+d82643ba80bf6937cd44@syzkaller.appspotmail.com
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'drivers/char')
0 files changed, 0 insertions, 0 deletions