diff options
| author | Herbert Xu <[email protected]> | 2025-09-16 07:42:41 +0000 |
|---|---|---|
| committer | Herbert Xu <[email protected]> | 2025-09-18 09:24:38 +0000 |
| commit | 9574b2330dbd2b5459b74d3b5e9619d39299fc6f (patch) | |
| tree | 736bb5af88f710f5fac1d67d6ccecfc98416381b /drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | |
| parent | crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_lock... (diff) | |
| download | kernel-9574b2330dbd2b5459b74d3b5e9619d39299fc6f.tar.gz kernel-9574b2330dbd2b5459b74d3b5e9619d39299fc6f.zip | |
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain
a garbage value from the previous loop. This may then trigger a
crash on the next entry into af_alg_sendmsg when it attempts to do
a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
Fixes: 8ff590903d5 ("crypto: algif_skcipher - User-space interface for skcipher operations")
Reported-by: Muhammad Alifa Ramdhan <[email protected]>
Reported-by: Bing-Jhong Billy Jheng <[email protected]>
Signed-off-by: Herbert Xu <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c')
0 files changed, 0 insertions, 0 deletions