| commit | 4702bbeefb490e315189636a5588628c1151223d | [log] [tgz] |
|---|---|---|
| author | Herbert Xu <herbert@gondor.apana.org.au> | Mon Apr 10 17:15:48 2017 +0800 |
| committer | Herbert Xu <herbert@gondor.apana.org.au> | Mon Apr 10 19:09:17 2017 +0800 |
| tree | c0c35538cd7fc5c2ea5041171440157cea22055b | |
| parent | aa4a829bdaced81e70c215a84ef6595ce8bd4308 [diff] |
crypto: lrw - Fix use-after-free on EINPROGRESS
When we get an EINPROGRESS completion in lrw, we will end up marking
the request as done and freeing it. This then blows up when the
request is really completed as we've already freed the memory.
Fixes: 700cb3f5fe75 ("crypto: lrw - Convert to skcipher")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>