On Thu, Jul 12, 2018 at 5:40 PM, Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote: > On Thu, Jul 12, 2018 at 06:02:26PM +0200, Arnd Bergmann wrote: >> >> Looking through some of the drivers, I found this interesting one: > > As I said before these patches are fundamentally broken. Users > of AHASH_REQUEST_ON_STACK can only use sync algorithm providers > and therefore drivers are irrelevant. I don't understand what this means. Can you give an example of what you want to see happen that will accomplish the VLA removals? -Kees -- Kees Cook Pixel Security
