提交 7efd95f6 编写于 作者: J Jesper Juhl 提交者: Herbert Xu

crypto: aesni-intel - Don't leak memory in rfc4106_set_hash_subkey

There's a small memory leak in 
arch/x86/crypto/aesni-intel_glue.c::rfc4106_set_hash_subkey(). If the call 
to kmalloc() fails and returns NULL then the memory allocated previously 
by ablkcipher_request_alloc() is not freed when we leave the function.

I could have just added a call to ablkcipher_request_free() before we 
return -ENOMEM, but that started to look too much like the code we 
already had at the end of the function, so I chose instead to rework the 
code a bit so that there are now a few labels at the end that we goto when 
various allocations fail, so we don't have to repeat the same blocks of 
code (this also reduces the object code size slightly).
Signed-off-by: NJesper Juhl <jj@chaosbits.net>
Signed-off-by: NHerbert Xu <herbert@gondor.apana.org.au>
上级 1bae4ce2
...@@ -873,21 +873,19 @@ rfc4106_set_hash_subkey(u8 *hash_subkey, const u8 *key, unsigned int key_len) ...@@ -873,21 +873,19 @@ rfc4106_set_hash_subkey(u8 *hash_subkey, const u8 *key, unsigned int key_len)
crypto_ablkcipher_clear_flags(ctr_tfm, ~0); crypto_ablkcipher_clear_flags(ctr_tfm, ~0);
ret = crypto_ablkcipher_setkey(ctr_tfm, key, key_len); ret = crypto_ablkcipher_setkey(ctr_tfm, key, key_len);
if (ret) { if (ret)
crypto_free_ablkcipher(ctr_tfm); goto out;
return ret;
}
req = ablkcipher_request_alloc(ctr_tfm, GFP_KERNEL); req = ablkcipher_request_alloc(ctr_tfm, GFP_KERNEL);
if (!req) { if (!req) {
crypto_free_ablkcipher(ctr_tfm); ret = -EINVAL;
return -EINVAL; goto out_free_ablkcipher;
} }
req_data = kmalloc(sizeof(*req_data), GFP_KERNEL); req_data = kmalloc(sizeof(*req_data), GFP_KERNEL);
if (!req_data) { if (!req_data) {
crypto_free_ablkcipher(ctr_tfm); ret = -ENOMEM;
return -ENOMEM; goto out_free_request;
} }
memset(req_data->iv, 0, sizeof(req_data->iv)); memset(req_data->iv, 0, sizeof(req_data->iv));
...@@ -913,9 +911,12 @@ rfc4106_set_hash_subkey(u8 *hash_subkey, const u8 *key, unsigned int key_len) ...@@ -913,9 +911,12 @@ rfc4106_set_hash_subkey(u8 *hash_subkey, const u8 *key, unsigned int key_len)
if (!ret) if (!ret)
ret = req_data->result.err; ret = req_data->result.err;
} }
out_free_request:
ablkcipher_request_free(req); ablkcipher_request_free(req);
kfree(req_data); kfree(req_data);
out_free_ablkcipher:
crypto_free_ablkcipher(ctr_tfm); crypto_free_ablkcipher(ctr_tfm);
out:
return ret; return ret;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册