freebsd-dev/sys/opencrypto
Mark Johnston 7c2f227a17 opencrypto: Disallow requests which pass VERIFY_DIGEST without a MAC
Otherwise we can end up comparing the computed digest with an
uninitialized kernel buffer.

In cryptoaead_op() we already unconditionally fail the request if a
pointer to a digest buffer is not specified.

Based on a patch by Simran Kathpalia.

Reported by:	syzkaller
Reviewed by:	jhb
MFC after:	1 week
Pull Request:	https://github.com/freebsd/freebsd-src/pull/529
Differential Revision:	https://reviews.freebsd.org/D32124
2021-09-24 15:04:45 -04:00
..
_cryptodev.h
cbc_mac.c Adjust crypto_apply function callbacks for OCF. 2020-06-10 21:18:19 +00:00
cbc_mac.h Adjust crypto_apply function callbacks for OCF. 2020-06-10 21:18:19 +00:00
criov.c crypto: Remove now-unused crypto_cursor_seg{base,len}. 2021-06-16 15:23:16 -07:00
crypto.c opencrypto: Allow kern.crypto.allow_soft to be specified as a tunable 2021-09-20 12:07:29 -04:00
cryptodeflate.c Replace some K&R function definitions with ANSI C. 2020-11-03 22:32:30 +00:00
cryptodev_if.m OCF: Remove support for asymmetric cryptographic operations. 2021-04-12 14:28:43 -07:00
cryptodev.c opencrypto: Disallow requests which pass VERIFY_DIGEST without a MAC 2021-09-24 15:04:45 -04:00
cryptodev.h crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
cryptosoft.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
deflate.h Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
gfmult.c Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
gfmult.h Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
gmac.c Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
gmac.h Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
ktls_ocf.c ktls: Support asynchronous dispatch of AEAD ciphers. 2021-08-30 13:11:52 -07:00
ktls.h ktls: Support asynchronous dispatch of AEAD ciphers. 2021-08-30 13:11:52 -07:00
rmd160.c Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
rmd160.h Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
xform_aes_icm.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_aes_xts.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_auth.h crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_cbc_mac.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_chacha20_poly1305.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_cml.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_comp.h crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_deflate.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_enc.h crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_gmac.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_null.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_poly1305.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_rijndael.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_rmd160.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_sha1.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform_sha2.c crypto: Constify all transform descriptors 2021-07-26 16:41:05 -04:00
xform.c Remove MD5 HMAC from OCF. 2020-05-11 22:08:08 +00:00
xform.h Remove MD5 HMAC from OCF. 2020-05-11 22:08:08 +00:00