Skip to content

crypto: s390/aes - Fix ctr(aes) read overrun

Herbert Xu requested to merge (removed):jr1744 into main

JIRA: https://issues.redhat.com/browse/RHEL-1744 Upstream status: merged into herbert/cryptodev-2.6.git

commit d07f951903fa9922c375b8ab1ce81b18a0034e3b Author: Herbert Xu herbert@gondor.apana.org.au Date: Tue Nov 28 14:22:13 2023 +0800

crypto: s390/aes - Fix buffer overread in CTR mode

When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.

Fixes: 0200f3ec ("crypto: s390 - add System z hardware support for CTR mode") Cc: stable@vger.kernel.org Reported-by: Guangwu Zhang guazhang@redhat.com Signed-off-by: Herbert Xu herbert@gondor.apana.org.au Reviewd-by: Harald Freudenberger freude@de.ibm.com Signed-off-by: Herbert Xu herbert@gondor.apana.org.au

Signed-off-by: Herbert Xu herbert.xu@redhat.com

Edited by Herbert Xu

Merge request reports