linux/lib/mpi
Herbert Xu 7361d1bc30 lib/mpi: Fix buffer overrun when SG is too long
The helper mpi_read_raw_from_sgl sets the number of entries in
the SG list according to nbytes.  However, if the last entry
in the SG list contains more data than nbytes, then it may overrun
the buffer because it only allocates enough memory for nbytes.

Fixes: 2d4d1eea54 ("lib/mpi: Add mpi sgl helpers")
Reported-by: Roberto Sassu <roberto.sassu@huaweicloud.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2023-01-06 17:15:46 +08:00
..
ec.c lib/mpi: Remove unused scalar_copied 2020-10-30 17:34:45 +11:00
generic_mpih-add1.c
generic_mpih-lshift.c
generic_mpih-mul1.c
generic_mpih-mul2.c
generic_mpih-mul3.c
generic_mpih-rshift.c
generic_mpih-sub1.c
longlong.h lib/mpi: fix spelling mistakes 2021-07-01 11:06:05 -07:00
Makefile lib/mpi: Introduce ec implementation to MPI library 2020-09-25 17:48:54 +10:00
mpi-add.c crypto: rsa - implement Chinese Remainder Theorem for faster private key operations 2022-06-24 17:12:29 +08:00
mpi-bit.c lib/mpi: export mpi_rshift 2022-03-03 10:47:52 +12:00
mpi-cmp.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpi-div.c lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpi-inline.h
mpi-internal.h lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpi-inv.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpi-mod.c lib/mpi: Add the return value check of kcalloc() 2022-01-07 14:30:01 +11:00
mpi-mul.c crypto: rsa - implement Chinese Remainder Theorem for faster private key operations 2022-06-24 17:12:29 +08:00
mpi-pow.c
mpi-sub-ui.c lib/mpi: Add mpi_sub_ui() 2020-07-31 18:08:59 +10:00
mpicoder.c lib/mpi: Fix buffer overrun when SG is too long 2023-01-06 17:15:46 +08:00
mpih-cmp.c
mpih-div.c lib/mpi: Fix unused variable warnings 2020-10-02 18:02:13 +10:00
mpih-mul.c lib/mpi: Extend the MPI library 2020-09-25 17:48:53 +10:00
mpiutil.c lib/mpi: fix typo 'the the' in comment 2022-07-29 18:12:35 -07:00