| commit | 5d0be84ec0cacfc7a6d6ea548afdd07d481324cd | [log] [tgz] |
|---|---|---|
| author | Eric Biggers <ebiggers@google.com> | Tue Aug 30 09:51:44 2016 -0700 |
| committer | Mike Snitzer <snitzer@redhat.com> | Tue Aug 30 19:45:19 2016 -0400 |
| tree | 584bc09b15f3303a1d542392f911db6e3690cb7b | |
| parent | 4e870e948fbabf62b78e8410f04c67703e7c816b [diff] |
dm crypt: fix free of bad values after tfm allocation failure If crypt_alloc_tfms() had to allocate multiple tfms and it failed before the last allocation, then it would call crypt_free_tfms() and could free pointers from uninitialized memory -- due to the crypt_free_tfms() check for non-zero cc->tfms[i]. Fix by allocating zeroed memory. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Mike Snitzer <snitzer@redhat.com> Cc: stable@vger.kernel.org