Jianglei Nie c93017c8d5 crypto: ccree - Fix use after free in cc_cipher_exit() ...

[ Upstream commit 3d950c3407 ]

kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But
ctx_p->user.key is still used in the next line, which will lead to a
use after free.

We can call kfree_sensitive() after dev_dbg() to avoid the uaf.

Fixes: 63ee04c8b4 ("crypto: ccree - add skcipher support")
Signed-off-by: Jianglei Nie <niejianglei2021@163.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-04-08 14:40:02 +02:00

..

cc_aead.c

…

cc_aead.h

…

cc_buffer_mgr.c

…

cc_buffer_mgr.h

…

cc_cipher.c

…

cc_cipher.h

…

cc_crypto_ctx.h

…

cc_debugfs.c

…

cc_debugfs.h

…

cc_driver.c

…

cc_driver.h

…

cc_fips.c

…

cc_fips.h

…

cc_hash.c

…

cc_hash.h

…

cc_host_regs.h

…

cc_hw_queue_defs.h

…

cc_kernel_regs.h

…

cc_lli_defs.h

…

cc_pm.c

…

cc_pm.h

…

cc_request_mgr.c

…

cc_request_mgr.h

…

cc_sram_mgr.c

…

cc_sram_mgr.h

…

Makefile

…