megha.dey@linux.intel.com 8861249c74 crypto: x86/sha1 - Fix reads beyond the number of blocks passed ...

It was reported that the sha1 AVX2 function(sha1_transform_avx2) is
reading ahead beyond its intended data, and causing a crash if the next
block is beyond page boundary:
http://marc.info/?l=linux-crypto-vger&m=149373371023377

This patch makes sure that there is no overflow for any buffer length.

It passes the tests written by Jan Stancek that revealed this problem:
https://github.com/jstancek/sha1-avx2-crash

I have re-enabled sha1-avx2 by reverting commit
b82ce24426

Cc: <stable@vger.kernel.org>
Fixes: b82ce24426 ("crypto: sha1-ssse3 - Disable avx2")
Originally-by: Ilya Albrekht <ilya.albrekht@intel.com>
Tested-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Megha Dey <megha.dey@linux.intel.com>
Reported-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

2017-08-09 20:01:37 +08:00

..

sha1-mb

objtool, x86: Add several functions and files to the objtool whitelist

2017-06-30 10:19:19 +02:00

sha256-mb

objtool, x86: Add several functions and files to the objtool whitelist

2017-06-30 10:19:19 +02:00

sha512-mb

crypto: sha512-mb - add some missing unlock on error

2017-05-18 13:19:48 +08:00

aes_ctrby8_avx-x86_64.S

crypto, x86: aesni - fix token pasting for clang

2017-03-24 22:02:55 +08:00

aes_glue.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

aes-i586-asm_32.S

…

aes-x86_64-asm_64.S

crypto: x86/aes - Don't use %rbp as temporary register

2017-05-23 12:52:05 +08:00

aesni-intel_asm.S

crypto: aesni - make non-AVX AES-GCM work with all valid auth_tag_len

2017-05-18 13:19:53 +08:00

aesni-intel_avx-x86_64.S

crypto: aesni - make AVX2 AES-GCM work with all valid auth_tag_len

2017-05-18 13:19:55 +08:00

aesni-intel_glue.c

crypto: aesni - add generic gcm(aes)

2017-05-18 13:19:55 +08:00

blowfish_glue.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

blowfish-x86_64-asm_64.S

…

camellia_aesni_avx2_glue.c

x86/cpufeature: Replace cpu_has_avx with boot_cpu_has() usage

2016-04-13 11:37:40 +02:00

camellia_aesni_avx_glue.c

x86/cpufeature: Replace cpu_has_avx with boot_cpu_has() usage

2016-04-13 11:37:40 +02:00

camellia_glue.c

crypto: gf128mul - switch gf128mul_x_ble to le128

2017-04-05 21:58:37 +08:00

camellia-aesni-avx2-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

camellia-aesni-avx-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

camellia-x86_64-asm_64.S

…

cast5_avx_glue.c

x86/fpu: Rename XSAVE macros

2015-09-14 12:21:46 +02:00

cast5-avx-x86_64-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

cast6_avx_glue.c

crypto: xts - consolidate sanity check for keys

2016-02-17 04:07:51 +08:00

cast6-avx-x86_64-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

chacha20_glue.c

crypto: x86/chacha20 - Manually align stack buffer

2017-01-13 00:26:46 +08:00

chacha20-avx2-x86_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

chacha20-ssse3-x86_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

crc32-pclmul_asm.S

…

crc32-pclmul_glue.c

x86/cpufeature: Carve out X86_FEATURE_*

2016-01-30 11:22:17 +01:00

crc32c-intel_glue.c

x86/fpu: Remove use_eager_fpu()

2016-10-07 11:14:36 +02:00

crc32c-pcl-intel-asm_64.S

crypto: x86/crc32c - fix %progbits -> @progbits

2017-01-23 22:50:26 +08:00

crct10dif-pcl-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

crct10dif-pclmul_glue.c

x86/cpufeature: Carve out X86_FEATURE_*

2016-01-30 11:22:17 +01:00

des3_ede_glue.c

crypto: x86/des3_ede - drop bogus module aliases

2015-01-13 22:30:52 +11:00

des3_ede-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

fpu.c

crypto: aesni - Convert to skcipher

2016-11-28 21:23:20 +08:00

ghash-clmulni-intel_asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

ghash-clmulni-intel_glue.c

crypto: ghash-clmulni - Fix cryptd reordering

2016-06-23 18:29:53 +08:00

glue_helper-asm-avx2.S

…

glue_helper-asm-avx.S

…

glue_helper.c

crypto: glue_helper - Delete some dead code

2017-06-19 14:11:54 +08:00

Makefile

objtool, x86: Add several functions and files to the objtool whitelist

2017-06-30 10:19:19 +02:00

poly1305_glue.c

x86/cpufeature: Replace cpu_has_avx with boot_cpu_has() usage

2016-04-13 11:37:40 +02:00

poly1305-avx2-x86_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

poly1305-sse2-x86_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

salsa20_glue.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

salsa20-i586-asm_32.S

…

salsa20-x86_64-asm_64.S

…

serpent_avx2_glue.c

x86/cpufeature: Replace cpu_has_avx2 with boot_cpu_has() usage

2016-04-13 11:37:39 +02:00

serpent_avx_glue.c

crypto: xts - consolidate sanity check for keys

2016-02-17 04:07:51 +08:00

serpent_sse2_glue.c

crypto: gf128mul - switch gf128mul_x_ble to le128

2017-04-05 21:58:37 +08:00

serpent-avx2-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

serpent-avx-x86_64-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

serpent-sse2-i586-asm_32.S

…

serpent-sse2-x86_64-asm_64.S

…

sha1_avx2_x86_64_asm.S

crypto: x86/sha1 - Fix reads beyond the number of blocks passed

2017-08-09 20:01:37 +08:00

sha1_ni_asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha1_ssse3_asm.S

…

sha1_ssse3_glue.c

crypto: x86/sha1 - Fix reads beyond the number of blocks passed

2017-08-09 20:01:37 +08:00

sha256_ni_asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha256_ssse3_glue.c

crypto: sha-ssse3 - add MODULE_ALIAS

2016-05-31 16:41:46 +08:00

sha256-avx2-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha256-avx-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha256-ssse3-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha512_ssse3_glue.c

crypto: sha-ssse3 - add MODULE_ALIAS

2016-05-31 16:41:46 +08:00

sha512-avx2-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha512-avx-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

sha512-ssse3-asm.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

twofish_avx_glue.c

x86/fpu: Fixup uninitialized feature_name warning

2015-09-24 09:21:20 +02:00

twofish_glue_3way.c

crypto: gf128mul - switch gf128mul_x_ble to le128

2017-04-05 21:58:37 +08:00

twofish_glue.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

twofish-avx-x86_64-asm_64.S

crypto: x86 - make constants readonly, allow linker to merge them

2017-01-23 22:50:29 +08:00

twofish-i586-asm_32.S

…

twofish-x86_64-asm_64-3way.S

…

twofish-x86_64-asm_64.S

x86/asm: Replace "MOVQ $imm, %reg" with MOVL

2015-04-01 13:17:39 +02:00