OrangePi_CM5/drivers/crypto
Dan Carpenter 3a720eb890 crypto: cavium - prevent integer overflow loading firmware
[ Upstream commit 2526d6bf27d15054bb0778b2f7bc6625fd934905 ]

The "code_length" value comes from the firmware file.  If your firmware
is untrusted realistically there is probably very little you can do to
protect yourself.  Still we try to limit the damage as much as possible.
Also Smatch marks any data read from the filesystem as untrusted and
prints warnings if it not capped correctly.

The "ntohl(ucode->code_length) * 2" multiplication can have an
integer overflow.

Fixes: 9e2c7d9994 ("crypto: cavium - Add Support for Octeon-tx CPT Engine")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-10-26 13:25:43 +02:00
..
allwinner crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() 2022-08-21 15:15:40 +02:00
amcc
amlogic crypto: amlogic - call finalize with bh disabled 2022-04-08 14:40:01 +02:00
axis
bcm crypto: bcm - Rename struct device_private to bcm_device_private 2021-03-04 11:37:40 +01:00
caam crypto: caam - fix i.MX6SX entropy delay value 2022-06-06 08:42:43 +02:00
cavium crypto: cavium - prevent integer overflow loading firmware 2022-10-26 13:25:43 +02:00
ccp crypto: ccp - Release dma channels before dmaengine unrgister 2022-10-26 13:25:42 +02:00
ccree crypto: ccree - use fine grained DMA mapping dir 2022-06-09 10:20:57 +02:00
chelsio crypto: chelsio - Read rxchannel-id from firmware 2021-05-14 09:50:19 +02:00
hisilicon crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr 2022-10-26 13:25:41 +02:00
inside-secure crypto: inside-secure - Change swab to swab32 2022-10-26 13:25:42 +02:00
marvell crypto: marvell/octeontx - prevent integer overflows 2022-10-26 13:25:43 +02:00
mediatek
nx powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr 2022-06-09 10:20:58 +02:00
qat crypto: qat - fix DMA transfer direction 2022-10-26 13:25:42 +02:00
qce crypto: qce - fix uaf on qce_skcipher_register_one 2022-01-27 10:53:49 +01:00
rockchip crypto: rockchip - ECB does not need IV 2022-04-08 14:40:00 +02:00
stm32 crypto: stm32 - fix reference leak in stm32_crc_remove 2022-05-25 09:17:53 +02:00
ux500 crypto: ux500 - Fix error return code in hash_hw_final() 2021-07-14 16:56:03 +02:00
virtio
vmx crypto: vmx - add missing dependencies 2022-04-08 14:40:01 +02:00
xilinx
Kconfig
Makefile
atmel-aes-regs.h
atmel-aes.c
atmel-authenc.h
atmel-ecc.c
atmel-i2c.c
atmel-i2c.h
atmel-sha-regs.h
atmel-sha.c
atmel-sha204a.c
atmel-tdes-regs.h
atmel-tdes.c
exynos-rng.c
geode-aes.c
geode-aes.h
hifn_795x.c
img-hash.c
ixp4xx_crypto.c crypto: ixp4xx - update IV after requests 2021-07-14 16:56:03 +02:00
mxs-dcp.c crypto: mxs-dcp - Fix scatterlist processing 2022-04-08 14:39:59 +02:00
n2_asm.S
n2_core.c
n2_core.h
omap-aes-gcm.c
omap-aes.c crypto: omap-aes - Fix broken pm_runtime_and_get() usage 2022-01-27 10:54:24 +01:00
omap-aes.h
omap-crypto.c
omap-crypto.h
omap-des.c crypto: omap - Fix inconsistent locking of device lists 2021-09-15 09:50:26 +02:00
omap-sham.c crypto: omap - Fix inconsistent locking of device lists 2021-09-15 09:50:26 +02:00
padlock-aes.c
padlock-sha.c
picoxcell_crypto.c
picoxcell_crypto_regs.h
qcom-rng.c crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ 2022-05-25 09:17:56 +02:00
s5p-sss.c crypto: s5p-sss - Add error handling in s5p_aes_probe() 2021-11-18 14:03:38 +01:00
sa2ul.c crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe() 2021-07-14 16:56:04 +02:00
sa2ul.h
sahara.c crypto: sahara - don't sleep when in softirq 2022-10-26 13:25:41 +02:00
talitos.c crypto: talitos - Fix ctr(aes) on SEC1 2021-03-04 11:37:45 +01:00
talitos.h crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) 2021-03-04 11:37:45 +01:00