linux-stable.git/crypto, branch v3.2.77

crypto: algif_skcipher - Load TX SG list after waiting

2016-02-13T10:34:13+00:00

commit 4f0414e54e4d1893c6f08260693f8ef84c929293 upstream.

We need to load the TX SG list in sendmsg(2) after waiting for
incoming data, not before.

Reported-by: Dmitry Vyukov 
Signed-off-by: Herbert Xu 
Tested-by: Dmitry Vyukov 
[bwh: Backported to 3.2: adjust context, indentation]
Signed-off-by: Ben Hutchings

crypto: algif_skcipher - Fix race condition in skcipher_check_key

2016-02-13T10:34:13+00:00

commit 1822793a523e5d5730b19cc21160ff1717421bc8 upstream.

We need to lock the child socket in skcipher_check_key as otherwise
two simultaneous calls can cause the parent socket to be freed.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: algif_hash - Fix race condition in hash_check_key

2016-02-13T10:34:13+00:00

commit ad46d7e33219218605ea619e32553daf4f346b9f upstream.

We need to lock the child socket in hash_check_key as otherwise
two simultaneous calls can cause the parent socket to be freed.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: af_alg - Forbid bind(2) when nokey child sockets are present

2016-02-13T10:34:13+00:00

commit a6a48c565f6f112c6983e2a02b1602189ed6e26e upstream.

This patch forbids the calling of bind(2) when there are child
sockets created by accept(2) in existence, even if they are created
on the nokey path.

This is needed as those child sockets have references to the tfm
object which bind(2) will destroy.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: algif_skcipher - Remove custom release parent function

2016-02-13T10:34:13+00:00

commit d7b65aee1e7b4c87922b0232eaba56a8a143a4a0 upstream.

This patch removes the custom release parent function as the
generic af_alg_release_parent now works for nokey sockets too.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: algif_hash - Remove custom release parent function

2016-02-13T10:34:12+00:00

commit f1d84af1835846a5a2b827382c5848faf2bb0e75 upstream.

This patch removes the custom release parent function as the
generic af_alg_release_parent now works for nokey sockets too.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path

2016-02-13T10:34:12+00:00

commit 6a935170a980024dd29199e9dbb5c4da4767a1b9 upstream.

This patch allows af_alg_release_parent to be called even for
nokey sockets.

Signed-off-by: Herbert Xu 
Signed-off-by: Ben Hutchings

crypto: algif_skcipher - Add key check exception for cipher_null

2016-02-13T10:34:12+00:00

commit 6e8d8ecf438792ecf7a3207488fb4eebc4edb040 upstream.

This patch adds an exception to the key check so that cipher_null
users may continue to use algif_skcipher without setting a key.

Signed-off-by: Herbert Xu 
[bwh: Backported to 3.2: use crypto_ablkcipher_has_setkey()]
Signed-off-by: Ben Hutchings

crypto: skcipher - Add crypto_skcipher_has_setkey

2016-02-13T10:34:12+00:00

commit a1383cd86a062fc798899ab20f0ec2116cce39cb upstream.

This patch adds a way for skcipher users to determine whether a key
is required by a transform.

Signed-off-by: Herbert Xu 
[bwh: Backported to 3.2: add to ablkcipher API instead]
Signed-off-by: Ben Hutchings

crypto: algif_hash - Require setkey before accept(2)

2016-02-13T10:34:12+00:00

commit 6de62f15b581f920ade22d758f4c338311c2f0d4 upstream.

Hash implementations that require a key may crash if you use
them without setting a key.  This patch adds the necessary checks
so that if you do attempt to use them without a key that we return
-ENOKEY instead of proceeding.

This patch also adds a compatibility path to support old applications
that do acept(2) before setkey.

Signed-off-by: Herbert Xu 
[bwh: Backported to 3.2:
 - Add struct kiocb * parameter to {recv,send}msg ops
 - Adjust context]
Signed-off-by: Ben Hutchings