crypto: scomp - fix req->dst buffer overflow
stable inclusion from stable-v4.19.306 commit 1142d65c5b881590962ad763f94505b6dd67d2fe category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO CVE: NA Reference: https://github.com/gregkh/linux/commit/1142d65c5b881590962ad763f94505b6dd67d2fe -------------------------------- [ Upstream commit 744e1885922a9943458954cfea917b31064b4131 ] The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem. Fixes: 1ab53a77 ("crypto: acomp - add driver-side scomp interface") Reported-by:<syzbot+3eff5e51bf1db122a16e@syzkaller.appspotmail.com> Closes: https://lore.kernel.org/all/0000000000000b05cd060d6b5511@google.com/ Signed-off-by:
Chengming Zhou <zhouchengming@bytedance.com> Reviewed-by:
Barry Song <v-songbaohua@oppo.com> Signed-off-by:
Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by:
Sasha Levin <sashal@kernel.org> Conflicts: crypto/scompress.c Signed-off-by:
GUO Zihua <guozihua@huawei.com>
Loading
Please sign in to comment