KEYS: fixes for new keyctl_dh_compute() KDF extension
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest5 patches 9 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/5 | KEYS: DH: forbid using digest_null as the KDF hashsecurity/ | +11 | 0 replies | |
| 2/5 | KEYS: DH: don't feed uninitialized "otherinfo" into KDFsecurity/ | +1 | 0 replies | |
| 3/5 | KEYS: DH: don't feed uninitialized result memory into KDFsecurity/ | +10 | 6 replies | |
| 4/5 | KEYS: DH: ensure the KDF counter is properly alignedsecurity/ | +3 | 0 replies | |
| 5/5 | KEYS: DH: add __user annotations to keyctl_kdf_paramsinclude/ | +2 | 0 replies |
Reviews trailers per patch
None of the 5 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.
| Patch | Stephan Mueller |
|---|---|
| Series | A-b |
| 1/5 | |
| 2/5 | |
| 3/5 | |
| 4/5 | |
| 5/5 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 0/5] KEYS: fixes for new keyctl_dh_compute() KDF extension
This patch series fixes several bugs in the KDF extension to keyctl_dh_compute() currently sitting in keys-next: a way userspace could cause an infinite loop, two ways userspace could cause the use of uninitialized memory, a misalignment, and missing __user annotations.
Eric Biggers (5):
KEYS: DH: forbid using digest_null as the KDF hash
KEYS: DH: don't feed uninitialized "otherinfo" into KDF
KEYS: DH: don't feed uninitialized result memory into KDF
KEYS: DH: ensure the KDF counter is properly aligned
KEYS: DH: add __user annotations to keyctl_kdf_params
include/uapi/linux/keyctl.h | 4 ++-- security/keys/dh.c | 50 ++++++++++++++++++++++----------------------- 2 files changed, 26 insertions(+), 28 deletions(-)
Signature · 1 line
2.12.2