Holger Dengler a91a5c25a2
s390/zcrypt: Validate length in reply before using it ...
The length information in the reply is used to copy the key token to
the target buffer. An invalid information in t->len of the reply may
cause an over-read of the target buffer and also a over-write of the
target buffer. To prevent that, check t->len before using it.
As the available space in destination and source buffer is always
larger than the valid length value in the parameter block in the
reply, compare t->len with this (already validated) length
information. As a side effect, this check also prevents buffer
over-read and over-write.
Reviewed-by: Harald Freudenberger <freude@linux.ibm.com >
Signed-off-by: Holger Dengler <dengler@linux.ibm.com >
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com >
Signed-off-by: Heiko Carstens <hca@linux.ibm.com >
2026-08-31 16:25:38 +02:00
2026-08-21 08:41:00 -07:00
2026-08-27 16:03:20 +02:00
2026-08-25 09:38:50 -07:00
2026-08-23 12:44:10 -07:00
2026-08-24 08:15:59 -07:00
2026-08-27 09:17:06 -07:00
2026-08-27 09:17:06 -07:00
2026-08-27 13:53:43 -07:00
2026-08-25 09:38:50 -07:00
2026-08-28 16:32:12 -07:00
2026-08-27 10:45:08 -07:00
2026-08-26 16:47:40 -07:00
2026-08-25 09:38:50 -07:00
2026-08-26 14:13:26 -07:00
2026-08-27 10:45:08 -07:00
2026-08-24 12:21:15 -07:00
2026-08-20 18:17:08 -07:00
2026-08-12 17:08:05 -07:00
2026-08-24 12:21:15 -07:00
2026-08-20 10:58:44 +10:00
2026-08-18 10:42:41 -07:00
2026-08-18 14:02:15 -07:00
2026-08-22 08:41:28 -07:00
2026-08-25 14:03:31 -07:00
2026-08-25 09:38:50 -07:00
2026-08-14 19:21:17 -03:00
2026-08-25 09:38:50 -07:00
2026-08-19 09:10:07 -07:00
2026-08-28 16:37:55 -07:00
2026-08-24 10:16:35 -07:00
2026-08-21 12:01:23 -07:00
2026-08-26 16:47:40 -07:00
2026-08-25 09:38:50 -07:00
2026-08-25 09:38:50 -07:00
2026-08-30 10:53:24 -07:00
2026-08-19 09:28:33 +02:00
2026-08-26 14:21:30 -07:00
2026-08-27 13:53:43 -07:00
2026-08-25 09:38:50 -07:00
2026-08-19 09:55:37 +02:00
2026-08-24 11:35:46 -07:00
2026-08-25 09:38:50 -07:00
2026-08-23 12:44:10 -07:00
2026-08-27 11:05:51 -07:00
2026-08-23 15:41:13 -05:00
2026-08-20 13:55:16 -07:00
2026-08-25 10:44:46 -07:00
2026-08-23 09:11:21 -07:00
2026-08-27 10:45:08 -07:00
2026-08-25 09:38:50 -07:00
2026-08-21 11:58:08 -07:00
2026-08-28 10:59:07 -07:00
2026-08-27 13:53:43 -07:00
2026-08-18 10:42:41 -07:00
2026-08-20 13:43:24 -07:00
2026-08-20 17:07:50 -07:00
2026-08-24 12:21:15 -07:00
2026-08-25 09:38:50 -07:00
2026-08-27 12:53:43 -07:00
2026-08-18 11:43:05 +02:00
2026-08-26 16:47:40 -07:00
2026-08-20 14:53:54 -07:00
2026-08-26 11:14:30 -07:00
2026-08-24 08:46:03 -07:00
2026-08-27 10:45:08 -07:00
2026-08-26 11:14:30 -07:00
2026-08-26 08:45:09 -07:00
2026-08-26 14:13:26 -07:00
2026-08-22 12:34:39 -07:00
2026-08-19 10:42:18 -07:00
2026-08-27 12:21:56 -07:00
2026-08-18 11:57:17 -07:00
2026-08-26 11:14:30 -07:00
2026-08-28 09:53:43 -07:00
2026-08-31 16:25:38 +02:00
2026-08-29 11:55:36 -07:00
2026-08-25 14:03:31 -07:00
2026-08-24 12:16:16 -07:00
2026-08-27 12:38:05 -07:00
2026-08-25 10:16:19 -07:00
2026-08-25 10:44:46 -07:00
2026-08-18 19:40:29 -07:00
2026-08-27 10:45:08 -07:00
2026-08-19 10:01:59 +02:00
2026-08-25 10:59:12 -07:00
2026-08-29 11:55:36 -07:00
2026-08-27 13:53:43 -07:00
2026-08-19 06:38:48 -04:00
2026-08-20 18:17:08 -07:00
2026-08-20 17:07:50 -07:00
2026-08-27 11:16:39 -07:00
2026-08-18 11:57:17 -07:00
2026-08-19 06:38:47 -04:00
2026-08-27 10:45:08 -07:00
2026-08-24 11:35:46 -07:00
a91a5c25a2