On Wed, Nov 29, 2017 at 07:48:53AM +0100, Stephan Mueller wrote: > Am Mittwoch, 29. November 2017, 00:02:40 CET schrieb Herbert Xu: > > > This is wrong. You can't fetch ctx->enc before you wait. It has > > to be done after the wait as otherwise ctx->enc may not even have > > been initialised. > > All ctx variables are initialized in aead_accept_parent_nokey. Thus, if no > sendmsg call is invoked by user space, at least a valid operation is > performed. I didn't mean initialised literally, I meant the value the user specified in sendmsg. If the recvmsg call precedes sendmsg then you can't possibly get the value that the user supplied. > I am wondering about the wait call inside the while () in af_alg_get_rsgl: > this has been taken from algif_skcipher. It would seem that moving the wait > call to the beginning of the recvmsg call would be applicable to skcipher as > well. I.e. the wait call should be removed from af_alg_get_rsgl entirely and > placed at the beginning the recvmsg function in both, the aead and skcipher > code paths. It sort of worked for skcipher because it didn't care if ctx->enc or even ctx->iv changed midstream. But even there I don't think we need to wait a second time. In fact waiting a second time could result in a dead-lock if no sendmsg call came around. So we should definitely wait only once for both aead and skcipher. Back to the original problem of ctx->enc changing midstream. I suppose it could actually be valid, e.g., when one request ended and you wish to sendmsg a second request while the first is yet to be started by recvmsg. So perhaps we can fix it by actually putting such request-specific information into a list along with the data rather than storing it in ctx directly as we do now. But anyway this isn't suitable for stable where we should just fix it by making it not crash. Thanks, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
