Changes in v2:
- Also fixed issue 2 described below in addition to issue 1 in v1
The aesni_gcm_enc/dec functions can access memory before the start or end of
the supplied src buffer. This can happen if either:
1. The data length is less than 16 bytes and there is no AAD or the AAD
length is not enough to cover the underrun. In this case, memory before
the start of the buffer would be accessed.
2. The AAD length is not a multiple of 4 bytes and the data length is too
small to cover the overrun. In this case, memory after the end of the
buffer would be accessed.
This was not a problem when rfc4106-gcm-aesni was the only mode supported by
the aesni module, as in that case there is always enough AAD and IV bytes to
cover the out-of-bounds accesses. However, that is no longer the case with
the generic-gcm-aesni mode. This could potentially result in accessing pages
that are not mapped, thus causing a crash.
Junaid Shahid (2):
crypto: Fix out-of-bounds access of the data buffer in
generic-gcm-aesni
crypto: Fix out-of-bounds access of the AAD buffer in
generic-gcm-aesni
arch/x86/crypto/aesni-intel_asm.S | 166 +++++++++++++-------------------------
1 file changed, 54 insertions(+), 112 deletions(-)
--
2.15.1.620.gb9897f4670-goog
