linux-stable/lib/mpi
Herbert Xu e83bf66998 lib/mpi: Fix buffer overrun when SG is too long
[ Upstream commit 7361d1bc30 ]

The helper mpi_read_raw_from_sgl sets the number of entries in
the SG list according to nbytes.  However, if the last entry
in the SG list contains more data than nbytes, then it may overrun
the buffer because it only allocates enough memory for nbytes.

Fixes: 2d4d1eea54 ("lib/mpi: Add mpi sgl helpers")
Reported-by: Roberto Sassu <roberto.sassu@huaweicloud.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-03-10 09:28:05 +01:00
..
Makefile lib/mpi: Introduce ec implementation to MPI library 2020-09-25 17:48:54 +10:00
ec.c lib/mpi: Remove unused scalar_copied 2020-10-30 17:34:45 +11:00
generic_mpih-add1.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-lshift.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-mul1.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-mul2.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-mul3.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-rshift.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
generic_mpih-sub1.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
longlong.h lib/mpi: fix spelling mistakes 2021-07-01 11:06:05 -07:00
mpi-add.c crypto: rsa - implement Chinese Remainder Theorem for faster private key operations 2022-06-24 17:12:29 +08:00
mpi-bit.c lib/mpi: export mpi_rshift 2022-03-03 10:47:52 +12:00
mpi-cmp.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpi-div.c lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpi-inline.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
mpi-internal.h lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpi-inv.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpi-mod.c lib/mpi: Add the return value check of kcalloc() 2022-01-07 14:30:01 +11:00
mpi-mul.c crypto: rsa - implement Chinese Remainder Theorem for faster private key operations 2022-06-24 17:12:29 +08:00
mpi-pow.c Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 2019-07-05 13:31:19 +09:00
mpi-sub-ui.c lib/mpi: Add mpi_sub_ui() 2020-07-31 18:08:59 +10:00
mpicoder.c lib/mpi: Fix buffer overrun when SG is too long 2023-03-10 09:28:05 +01:00
mpih-cmp.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 26 2019-05-24 17:27:10 +02:00
mpih-div.c lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpih-mul.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpiutil.c lib/mpi: fix typo 'the the' in comment 2022-07-29 18:12:35 -07:00