tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Pull crypto fix from Herbert Xu:
"This fixes a NULL pointer dereference in crypto_remove_spawns that can
be triggered through af_alg"

* 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
crypto: algapi - fix NULL dereference in crypto_remove_spawns()

Linus Torvalds 70cd9071 f12e0dd0

+12
+12
crypto/algapi.c
··· 167 167 168 168 spawn->alg = NULL; 169 169 spawns = &inst->alg.cra_users; 170 + 171 + /* 172 + * We may encounter an unregistered instance here, since 173 + * an instance's spawns are set up prior to the instance 174 + * being registered. An unregistered instance will have 175 + * NULL ->cra_users.next, since ->cra_users isn't 176 + * properly initialized until registration. But an 177 + * unregistered instance cannot have any users, so treat 178 + * it the same as ->cra_users being empty. 179 + */ 180 + if (spawns->next == NULL) 181 + break; 170 182 } 171 183 } while ((spawns = crypto_more_spawns(alg, &stack, &top, 172 184 &secondary_spawns)));