From patchwork Thu Apr 18 08:17:34 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Corentin Labbe X-Patchwork-Id: 162446 Delivered-To: patch@linaro.org Received: by 2002:a02:c6d8:0:0:0:0:0 with SMTP id r24csp448364jan; Thu, 18 Apr 2019 01:18:00 -0700 (PDT) X-Google-Smtp-Source: APXvYqw1GeT79Pe+On7WTILlKfYtvSzGF2m62qOMof14d/GEdeZ9AUhgUTsZg03TxVf/Kv5XG2ZO X-Received: by 2002:a17:902:9b83:: with SMTP id y3mr91250245plp.165.1555575480742; Thu, 18 Apr 2019 01:18:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1555575480; cv=none; d=google.com; s=arc-20160816; b=oW3/5xGd+rCUA2iuyIth6VhEZ2xzh6vZfvyC4yseLp5mQHwSXEi0PMkhTbIosEjTyW DLAiKiJVKLvw315nxvZxpbEoAmBrnPXnEjlbhZT6Y87uqLaI6rhICHYlm/I17NPKnyHP KDdmhCU8ADW/g/4ukyTgZ0XcRmmuopTMiU438/PXnhBL8GdBx5PY8HK8hCLZR+DFOK2O v6HwKEEhXAOqFn5I7dyDnc4+bhSxWX1MR7yWgEM9p6ZJDqtM6zUlfJEJ3F+PM5WnwnVp 2G1Z2eywkwDjPGdoPh0bJs116zanbf4/+E8by+cml+LqYonHmK3+Q3JIi1jhmhbQJUM4 QXnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=z5FqXHUkkOxiPqY9isBq9yK5Qx1B2t+uIrpEWzqHhn4=; b=bYLSKTgQKugZYFYTawywlxiFmTxyN0iwXC5X/gVa7lncio00diLyZ9ovOg7cWdvi0m Vp8NvHcDW0qcccL1WrrSGS8/7Pfk6yNWB2Melvjpq9PkcPiuYOe2Tm1BqI995E6Eu+Ch eRgIUzWTl6/IYnladFS+cM7vohMXLY0bG7snLdeNojpFb4J70eTtKq49XI770v/pfwpD YNiVMNo7QCO34avbkWz/4Q1vsXY896mpLGef3ACo1ZCOSZIsYaQAFqbAY85wrbRJcdPV mxZMdFlAeR1XIXwAcQUufXNN4xzw2ov1aPc96pzfuqLwLsJqa88avL+dDqMzVUyB++si wG+w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=ScQFT3IF; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id w21si1352870pgj.513.2019.04.18.01.18.00; Thu, 18 Apr 2019 01:18:00 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=ScQFT3IF; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2388307AbfDRIR7 (ORCPT + 30 others); Thu, 18 Apr 2019 04:17:59 -0400 Received: from mail-wm1-f66.google.com ([209.85.128.66]:51744 "EHLO mail-wm1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2388279AbfDRIRy (ORCPT ); Thu, 18 Apr 2019 04:17:54 -0400 Received: by mail-wm1-f66.google.com with SMTP id 4so1728852wmf.1; Thu, 18 Apr 2019 01:17:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=z5FqXHUkkOxiPqY9isBq9yK5Qx1B2t+uIrpEWzqHhn4=; b=ScQFT3IFvQa3euQsJP1/Jz+BGtaJxiOW7DbwNa0GEW0uzJdXZjsVsr1ixuuH+SDaof C3Nlzbc13LL7Z6bDjxnnceYseWsGmSGaKuVBmfTnCTsp5tm1TrPtTSruQIRKFPJFFpCL yCJEGWXHfNbvUEOzMnnTYF7box5TzYUHuZL2itCwVP7NWbVUUBab1aNxQK9uwLBJpKxF pyNbKowIkgsmzRaYpMP3J8XRL3+QvYX74O+trtA//jC81NVb6i2TqC7Jtqe9xtDij4lt YpfxXiwQ1ieUgyC30tX5zTCFsbTkfxqjrVcnRCvkyZdfjXKbV5u5Fj1T+e/pF7l5jgYV zkfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=z5FqXHUkkOxiPqY9isBq9yK5Qx1B2t+uIrpEWzqHhn4=; b=atiwMCFbjjHFPJjkvrvyrO7b5vNHp4j2cUJkm2w12ZrmzNBk5dzqxtR3SEBljmbbVN 0MsjV0+TRQIuuPzcmRqUaCxxCC0/USKBpyBcvLDpUc7jT3FQrpS9wCV81dkun7MEs1XZ m0TWv+VSYUx0KccNGd5zJTjFnJPRo3/YnEP2CXjg3pvOJ2vyN8XPxWwJtOYLupJLx63E b0WTjoSuM5KM5ljANiBpC7JLbmCvuU6aGYBOySJGJn01b4lZ9Ydf6D9pLeEGknHdTYXo TKRJ3D57MA+N3irwm8zDIKE9zNJhJpNLOyEA/mybuKH4HhZtyaL8KttXofaMixN/eEHK cRFw== X-Gm-Message-State: APjAAAXx5evgNzYs+YtqeINWAsz8VWMXUHzcVcvM/pYf++j4tJiDIGSg P8cEU7+JU04l1rrODcnR8Xw= X-Received: by 2002:a1c:4602:: with SMTP id t2mr1991850wma.120.1555575472351; Thu, 18 Apr 2019 01:17:52 -0700 (PDT) Received: from Red.localdomain ([2a01:cb1d:147:7200:2e56:dcff:fed2:c6d6]) by smtp.googlemail.com with ESMTPSA id w11sm2350619wre.15.2019.04.18.01.17.51 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 Apr 2019 01:17:51 -0700 (PDT) From: Corentin Labbe To: davem@davemloft.net, herbert@gondor.apana.org.au, maxime.ripard@bootlin.com, wens@csie.org Cc: linux-arm-kernel@lists.infradead.org, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org, linux-sunxi@googlegroups.com, ebiggers@kernel.org, Corentin Labbe Subject: [PATCH 3/4] crypto: sun4i-ss: Fix invalid calculation of hash end Date: Thu, 18 Apr 2019 10:17:34 +0200 Message-Id: <20190418081735.19002-4-clabbe.montjoie@gmail.com> X-Mailer: git-send-email 2.21.0 In-Reply-To: <20190418081735.19002-1-clabbe.montjoie@gmail.com> References: <20190418081735.19002-1-clabbe.montjoie@gmail.com> MIME-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org When nbytes < 4, end is wronlgy set to a negative value which, due to uint, is then interpreted to a large value leading to a deadlock in the following code. This patch fix this problem. Fixes: 6298e948215f ("crypto: sunxi-ss - Add Allwinner Security System crypto accelerator") Signed-off-by: Corentin Labbe --- drivers/crypto/sunxi-ss/sun4i-ss-hash.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) -- 2.21.0 diff --git a/drivers/crypto/sunxi-ss/sun4i-ss-hash.c b/drivers/crypto/sunxi-ss/sun4i-ss-hash.c index a4b5ff2b72f8..f6936bb3b7be 100644 --- a/drivers/crypto/sunxi-ss/sun4i-ss-hash.c +++ b/drivers/crypto/sunxi-ss/sun4i-ss-hash.c @@ -240,7 +240,10 @@ static int sun4i_hash(struct ahash_request *areq) } } else { /* Since we have the flag final, we can go up to modulo 4 */ - end = ((areq->nbytes + op->len) / 4) * 4 - op->len; + if (areq->nbytes < 4) + end = 0; + else + end = ((areq->nbytes + op->len) / 4) * 4 - op->len; } /* TODO if SGlen % 4 and !op->len then DMA */