Daniel Axtens
e8de7b8ec2
crypto: vmx - fix copy-paste error in CTR mode ...
commit dcf7b48212c0fab7df69e84fab22d6cb7c8c0fb9 upstream.
The original assembly imported from OpenSSL has two copy-paste
errors in handling CTR mode. When dealing with a 2 or 3 block tail,
the code branches to the CBC decryption exit path, rather than to
the CTR exit path.
This leads to corruption of the IV, which leads to subsequent blocks
being corrupted.
This can be detected with libkcapi test suite, which is available at
https://github.com/smuellerDD/libkcapi
Reported-by: Ondrej Mosnáček <omosnacek@gmail.com>
Fixes: 5c380d623estable@vger.kernel.org
Signed-off-by: Daniel Axtens <dja@axtens.net>
Tested-by: Michael Ellerman <mpe@ellerman.id.au>
Tested-by: Ondrej Mosnacek <omosnacek@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-05-21 18:48:57 +02:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-01 15:13:08 -07:00
binder: fix proc->files use-after-free
2018-12-08 13:05:07 +01:00
libata: fix using DMA buffers on stack
2019-05-04 08:49:09 +02:00
atm: he: fix sign-extension overflow on large shift
2019-02-27 10:06:59 +01:00
x86/speculation/mds: Add sysfs reporting for MDS
2019-05-14 19:19:40 +02:00
virtio-blk: limit number of hw queues by nr_cpu_ids
2019-05-10 17:52:09 +02:00
Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV"
2018-11-27 16:09:40 +01:00
bus: arm-cci: remove unnecessary unreachable()
2018-12-05 19:42:41 +01:00
cdrom: Fix race condition in cdrom_sysctl_register
2019-04-05 22:29:12 +02:00
tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
2019-04-27 09:34:41 +02:00
clk: ingenic: Fix doc of ingenic_cgu_div_info
2019-03-23 13:19:49 +01:00
clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
2019-03-23 13:19:46 +01:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
cpuidle: big.LITTLE: fix refcount leak
2019-02-12 19:44:55 +01:00
crypto: vmx - fix copy-paste error in CTR mode
2019-05-21 18:48:57 +02:00
PM / devfreq: Fix potential NULL pointer dereference in governor_store
2018-04-13 19:48:09 +02:00
dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
2019-05-02 09:32:02 +02:00
dma-buf: remove redundant initialization of sg_table
2018-06-06 16:44:33 +02:00
EDAC, skx_edac: Fix logical channel intermediate decoding
2018-11-13 11:16:56 -08:00
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-05-30 07:50:18 +02:00
efi/memattr: Don't bail on zero VA if it equals the region's PA
2019-04-05 22:29:12 +02:00
gpio: of: Fix of_gpiochip_add() error path
2019-05-04 08:49:09 +02:00
gpu: ipu-v3: dp: fix CSC handling
2019-05-16 19:43:43 +02:00
HID: input: add mapping for "Toggle Display" key
2019-05-16 19:43:41 +02:00
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2018-12-29 13:40:15 +01:00
hwmon: (lm80) Fix missing unlock on error in set_fan_div()
2019-02-23 09:05:58 +01:00
intel_th: gth: Fix an off-by-one in output unassigning
2019-05-02 09:32:03 +02:00
i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
2019-04-05 22:29:05 +02:00
ide: pmac: add of_node_put()
2018-12-21 14:11:37 +01:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio: adc: xilinx: fix potential use-after-free on remove
2019-05-16 19:43:40 +02:00
IB/hfi1: Eliminate opcode tests on mr deref
2019-05-10 17:52:08 +02:00
Input: synaptics-rmi4 - fix possible double free
2019-05-16 19:43:44 +02:00
iommu/amd: Set exclusion range correctly
2019-05-10 17:52:09 +02:00
MIPS: perf: ath79: Fix perfcount IRQ assignment
2019-05-16 19:43:43 +02:00
mISDN: Check address length before reading address family
2019-05-16 19:43:42 +02:00
leds: pca9532: fix a potential NULL pointer dereference
2019-05-04 08:49:10 +02:00
macintosh/rack-meter: Convert cputime64_t use to u64
2018-10-20 09:51:32 +02:00
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
2018-09-09 20:01:19 +02:00
Don't jump to compute_result state from check_result state
2019-05-16 19:43:44 +02:00
media: v4l2: i2c: ov7670: Fix PLL bypass register values
2019-05-08 07:19:12 +02:00
memory: tegra: Apply interrupts mask per SoC
2018-08-03 07:55:24 +02:00
memstick: Prevent memstick host from getting runtime suspended during card detection
2019-02-12 19:44:55 +01:00
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-25 16:13:06 +02:00
mfd: mc13xxx: Fix a missing check of a register-read failure
2019-02-27 10:06:59 +01:00
lkdtm: Add tests for NULL pointer dereference
2019-04-20 09:07:53 +02:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
mtd: rawnand: gpmi: fix MX28 bus master lockup problem
2019-02-15 08:07:37 +01:00
bonding: fix arp_validate toggling in active-backup mode
2019-05-16 19:43:46 +02:00
spi: ST ST95HF NFC: declare missing of table
2019-05-16 19:43:43 +02:00
ntb_transport: Fix bug with max_mw_size parameter
2018-05-30 07:50:22 +02:00
libnvdimm/btt: Fix a kmemdup failure check
2019-05-16 19:43:41 +02:00
nvme-loop: init nvmet_ctrl fatal_err_work when allocate
2019-05-08 07:19:08 +02:00
nvmem: properly handle returned value nvmem_reg_read
2018-08-03 07:55:22 +02:00
of: add helper to lookup compatible child node
2018-12-01 09:44:21 +01:00
parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2018-05-30 07:50:43 +02:00
parport_pc: fix find_superio io compare code, should use equal test.
2019-03-23 13:19:50 +01:00
PCI: hv: Fix a memory leak in hv_eject_device_work()
2019-05-21 18:48:55 +02:00
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-13 11:16:46 -08:00
phy: tegra: remove redundant self assignment of 'map'
2019-02-27 10:07:03 +01:00
pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
2019-03-23 13:19:43 +01:00
platform/x86: sony-laptop: Fix unintentional fall-through
2019-05-16 19:43:40 +02:00
power: supply: axp288_charger: Fix unchecked return value
2019-05-21 18:48:56 +02:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
2019-02-12 19:44:52 +01:00
pwm: tiehrpwm: Fix disabling of output of PWMs
2018-09-09 20:01:25 +02:00
regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
2019-04-05 22:29:14 +02:00
reset: make device_reset_optional() really optional
2018-12-08 13:05:08 +01:00
rpmsg: smd: fix memory leak on channel create
2018-11-13 11:17:03 -08:00
rtc: da9063: set uie_unsupported when relevant
2019-05-08 07:19:10 +02:00
s390: ctcm: fix ctcm_new_device error return code
2019-05-16 19:43:43 +02:00
drivers/sbus/char: add of_node_put()
2018-12-21 14:11:36 +01:00
scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
2019-05-10 17:52:10 +02:00
soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()
2019-04-20 09:07:53 +02:00
spi: pxa2xx: Setup maximum supported DMA transfer length
2019-03-23 13:19:46 +01:00
staging: greybus: power_supply: fix prop-descriptor request size
2019-05-10 17:52:07 +02:00
scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
2019-03-23 13:19:47 +01:00
TC: Set DMA masks for devices
2018-11-13 11:17:02 -08:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
thunderbolt: Resume control channel after hibernation image is created
2018-04-24 09:34:12 +02:00
serial: ar933x_uart: Fix build failure with disabled console
2019-05-04 08:49:07 +02:00
uio: Fix an Oops on load
2018-11-27 16:09:41 +01:00
USB: serial: fix unthrottle races
2019-05-16 19:43:40 +02:00
uwb: hwa-rc: fix memory leak at probe
2018-10-03 17:01:42 -07:00
vfio/pci: use correct format characters
2019-05-08 07:19:10 +02:00
vhost: reject zero size iova range
2019-04-27 09:34:40 +02:00
fbdev: fbmem: fix memory access if logo is bigger than the screen
2019-04-05 22:29:12 +02:00
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:43:47 +02:00
virtio: Honour 'may_reduce_num' in vring_create_virtqueue
2019-04-17 08:36:47 +02:00
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
2019-05-08 07:19:08 +02:00
watchdog: sbsa: use 32-bit read for WCV
2018-05-30 07:50:34 +02:00
xen: xlate_mmu: add missing header to fix 'W=1' warning
2018-12-17 09:38:34 +01:00
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
e8de7b8ec2