OSDN Git Service

crypto: shash - Fix zero-length shash ahash digest crash
authorHerbert Xu <herbert@gondor.apana.org.au>
Mon, 9 Oct 2017 15:30:02 +0000 (23:30 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 18 Oct 2017 07:35:38 +0000 (09:35 +0200)
commit91daaefbe5df9da88589ffc2a9c448d771d1bbe7
tree6d8a13a41e9276045b0960272f41de6ca56924e7
parent57265cddde308292af881ce634a5378dd4e25900
crypto: shash - Fix zero-length shash ahash digest crash

commit b61907bb42409adf9b3120f741af7c57dd7e3db2 upstream.

The shash ahash digest adaptor function may crash if given a
zero-length input together with a null SG list.  This is because
it tries to read the SG list before looking at the length.

This patch fixes it by checking the length first.

Reported-by: Stephan Müller<smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Tested-by: Stephan Müller <smueller@chronox.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/shash.c