Messages in this thread | | | Date | Sat, 20 Nov 2021 12:30:17 +0800 | From | Herbert Xu <> | Subject | Re: [PATCH] crypto: qce: fix uaf on qce_skcipher_register_one |
| |
On Thu, Nov 04, 2021 at 06:46:42AM -0700, Chengfeng Ye wrote: > Pointer alg points to sub field of tmpl, it > is dereferenced after tmpl is freed. Fix > this by accessing alg before free tmpl. > > Fixes: ec8f5d8f ("crypto: qce - Qualcomm crypto engine driver") > Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk> > --- > drivers/crypto/qce/skcipher.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-)
Patch applied. Thanks. -- Email: Herbert Xu <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |