Eric Biggers
281590b422
KEYS: DH: don't feed uninitialized "otherinfo" into KDF ...
If userspace called KEYCTL_DH_COMPUTE with kdf_params containing NULL
otherinfo but nonzero otherinfolen, the kernel would allocate a buffer
for the otherinfo, then feed it into the KDF without initializing it.
Fix this by always doing the copy from userspace (which will fail with
EFAULT in this scenario).
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: James Morris <james.l.morris@oracle.com>
2017-06-09 13:29:49 +10:00
KEYS: encrypted: sanitize all key material
2017-06-09 13:29:48 +10:00
KEYS: add SP800-56A KDF support for DH
2017-04-04 22:33:38 +01:00
KEYS: add SP800-56A KDF support for DH
2017-04-04 22:33:38 +01:00
KEYS: DH: don't feed uninitialized "otherinfo" into KDF
2017-06-09 13:29:49 +10:00
KEYS: sanitize key structs before freeing
2017-06-09 13:29:48 +10:00
KEYS: add SP800-56A KDF support for DH
2017-04-04 22:33:38 +01:00
security/keys: add CONFIG_KEYS_COMPAT to Kconfig
2017-06-09 13:29:45 +10:00
KEYS: fix freeing uninitialized memory in key_update()
2017-06-09 13:29:47 +10:00
KEYS: sanitize add_key() and keyctl() key payloads
2017-06-09 13:29:48 +10:00
security: use READ_ONCE instead of deprecated ACCESS_ONCE
2017-06-09 13:29:45 +10:00
KEYS: add SP800-56A KDF support for DH
2017-04-04 22:33:38 +01:00
sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>
2017-03-02 08:42:31 +01:00
security, keys: convert key_user.usage from atomic_t to refcount_t
2017-04-03 10:49:06 +10:00
KEYS: put keyring if install_session_keyring_to_cred() fails
2017-06-09 13:29:46 +10:00
Make static usermode helper binaries constant
2017-01-19 12:59:45 +01:00
security, keys: convert key.usage from atomic_t to refcount_t
2017-04-03 10:49:05 +10:00
KEYS: trusted: sanitize all key material
2017-06-09 13:29:48 +10:00
KEYS: user_defined: sanitize key payloads
2017-06-09 13:29:48 +10:00
281590b422