Eric Biggers e9ff56ac35 KEYS: encrypted: avoid encrypting/decrypting stack buffers ... Since v4.9, the crypto API cannot (normally) be used to encrypt/decrypt stack buffers because the stack may be virtually mapped. Fix this for the padding buffers in encrypted-keys by using ZERO_PAGE for the encryption padding and by allocating a temporary heap buffer for the decryption padding. Tested with CONFIG_DEBUG_SG=y: keyctl new_session keyctl add user master "abcdefghijklmnop" @s keyid=$(keyctl add encrypted desc "new user:master 25" @s) datablob="$(keyctl pipe $keyid)" keyctl unlink $keyid keyid=$(keyctl add encrypted desc "load $datablob" @s) datablob2="$(keyctl pipe $keyid)" [ "$datablob" = "$datablob2" ] && echo "Success!" Cc: Andy Lutomirski <luto@kernel.org> Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: stable@vger.kernel.org # 4.9+ Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: James Morris <james.l.morris@oracle.com>		2017-06-09 13:29:46 +10:00
..
ecryptfs_format.c	encrypted-keys: create encrypted-keys directory	2011-09-14 15:22:26 -04:00
ecryptfs_format.h	encrypted-keys: create encrypted-keys directory	2011-09-14 15:22:26 -04:00
encrypted.c	KEYS: encrypted: avoid encrypting/decrypting stack buffers	2017-06-09 13:29:46 +10:00
encrypted.h	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
Makefile	encrypted-keys: module build fixes	2011-11-16 14:23:14 -05:00
masterkey_trusted.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00