Herbert Xu 9ae0f82aa7 lib/mpi: Fix buffer overrun when SG is too long ... [ Upstream commit 7361d1bc30 ] The helper mpi_read_raw_from_sgl sets the number of entries in the SG list according to nbytes. However, if the last entry in the SG list contains more data than nbytes, then it may overrun the buffer because it only allocates enough memory for nbytes. Fixes: 2d4d1eea54 ("lib/mpi: Add mpi sgl helpers") Reported-by: Roberto Sassu <roberto.sassu@huaweicloud.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-03-10 09:39:09 +01:00
..
ec.c	lib/mpi: Remove unused scalar_copied	2020-10-30 17:34:45 +11:00
generic_mpih-add1.c
generic_mpih-lshift.c
generic_mpih-mul1.c
generic_mpih-mul2.c
generic_mpih-mul3.c
generic_mpih-rshift.c
generic_mpih-sub1.c
longlong.h	lib/mpi: fix spelling mistakes	2021-07-01 11:06:05 -07:00
Makefile	lib/mpi: Introduce ec implementation to MPI library	2020-09-25 17:48:54 +10:00
mpi-add.c	lib/mpi: Extend the MPI library	2020-09-25 17:48:53 +10:00
mpi-bit.c	lib/mpi/mpi-bit.c: fix spello of "functions"	2020-10-16 11:11:20 -07:00
mpi-cmp.c	lib/mpi: Extend the MPI library	2020-09-25 17:48:53 +10:00
mpi-div.c	lib/mpi: Fix unused variable warnings	2020-10-02 18:02:13 +10:00
mpi-inline.h
mpi-internal.h	lib/mpi: Fix unused variable warnings	2020-10-02 18:02:13 +10:00
mpi-inv.c	lib/mpi: Extend the MPI library	2020-09-25 17:48:53 +10:00
mpi-mod.c	lib/mpi: Add the return value check of kcalloc()	2022-01-27 11:03:58 +01:00
mpi-mul.c	lib/mpi: Fix unused variable warnings	2020-10-02 18:02:13 +10:00
mpi-pow.c
mpi-sub-ui.c
mpicoder.c	lib/mpi: Fix buffer overrun when SG is too long	2023-03-10 09:39:09 +01:00
mpih-cmp.c
mpih-div.c	lib/mpi: Fix unused variable warnings	2020-10-02 18:02:13 +10:00
mpih-mul.c	lib/mpi: Extend the MPI library	2020-09-25 17:48:53 +10:00
mpiutil.c	lib/mpi: use kcalloc in mpi_resize	2021-08-12 19:17:00 +08:00