diff options
| author | Aleksandr Mishin <amishin@t-argos.ru> | 2024-03-22 23:59:15 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2024-06-16 13:23:24 +0200 |
| commit | c256b616067bfd6d274c679c06986b78d2402434 (patch) | |
| tree | acb3b1de1e6c9a9ecfd89231cfb338b38feb6ce3 /drivers/firmware/raspberrypi.c | |
| parent | 6d2d2aaae1faa64c2f803d6f11f4b2df3b3c2cff (diff) | |
crypto: bcm - Fix pointer arithmetic
[ Upstream commit 2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9 ]
In spu2_dump_omd() value of ptr is increased by ciph_key_len
instead of hash_iv_len which could lead to going beyond the
buffer boundaries.
Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes: 9d12ba86f818 ("crypto: brcm - Add Broadcom SPU driver")
Signed-off-by: Aleksandr Mishin <amishin@t-argos.ru>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/firmware/raspberrypi.c')
0 files changed, 0 insertions, 0 deletions