]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
crypto: drbg - set freed buffers to NULL
authorStephan Mueller <smueller@chronox.de>
Thu, 12 Apr 2018 06:40:55 +0000 (08:40 +0200)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 14 Aug 2018 10:24:26 +0000 (12:24 +0200)
commita1d5618e474fa6b86322afc3a5b0dd4d2a76f95d
treee0848601c94a6b7d63ee8ad7e13ad06c3f5b3077
parent82bd3a88e545ef89c81fa77889d2c92a6429689f
crypto: drbg - set freed buffers to NULL

BugLink: http://bugs.launchpad.net/bugs/1778265
commit eea0d3ea7546961f69f55b26714ac8fd71c7c020 upstream.

During freeing of the internal buffers used by the DRBG, set the pointer
to NULL. It is possible that the context with the freed buffers is
reused. In case of an error during initialization where the pointers
do not yet point to allocated memory, the NULL value prevents a double
free.

Cc: stable@vger.kernel.org
Fixes: 3cfc3b9721123 ("crypto: drbg - use aligned buffers")
Signed-off-by: Stephan Mueller <smueller@chronox.de>
Reported-by: syzbot+75397ee3df5c70164154@syzkaller.appspotmail.com
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
crypto/drbg.c