David Howells 0b7ec177b5 crypto: algif_hash - Fix race between MORE and non-MORE sends ... The 'MSG_MORE' state of the previous sendmsg() is fetched without the socket lock held, so two sendmsg calls can race. This can be seen with a large sendfile() as that now does a series of sendmsg() calls, and if a write() comes in on the same socket at an inopportune time, it can flip the state. Fix this by moving the fetch of ctx->more inside the socket lock. Fixes: c662b043cd ("crypto: af_alg/hash: Support MSG_SPLICE_PAGES") Reported-by: syzbot+689ec3afb1ef07b766b2@syzkaller.appspotmail.com Link: https://lore.kernel.org/r/000000000000554b8205ffdea64e@google.com/ Signed-off-by: David Howells <dhowells@redhat.com> Tested-by: syzbot+689ec3afb1ef07b766b2@syzkaller.appspotmail.com cc: Herbert Xu <herbert@gondor.apana.org.au> cc: Paolo Abeni <pabeni@redhat.com> cc: "David S. Miller" <davem@davemloft.net> cc: Eric Dumazet <edumazet@google.com> cc: Jakub Kicinski <kuba@kernel.org> cc: linux-crypto@vger.kernel.org cc: netdev@vger.kernel.org Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>		2023-07-08 22:48:42 +10:00
..
asymmetric_keys	KEYS: asymmetric: Fix error codes	2023-07-07 14:16:47 +10:00
async_tx	async_tx: fix kernel-doc notation warnings	2023-03-24 18:22:28 +08:00
842.c	…
Kconfig	crypto: sig - Add interface for sign/verify	2023-06-23 16:15:36 +08:00
Makefile	crypto: sig - Add interface for sign/verify	2023-06-23 16:15:36 +08:00
acompress.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
adiantum.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
aead.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
aegis-neon.h	crypto: aegis128-neon - add header for internal prototypes	2023-05-24 18:12:33 +08:00
aegis.h	…
aegis128-core.c	…
aegis128-neon-inner.c	crypto: aegis128-neon - add header for internal prototypes	2023-05-24 18:12:33 +08:00
aegis128-neon.c	crypto: aegis128-neon - add header for internal prototypes	2023-05-24 18:12:33 +08:00
aes_generic.c	…
aes_ti.c	…
af_alg.c	crypto: af_alg - Fix merging of written data into spliced pages	2023-07-05 16:14:24 +08:00
ahash.c	crypto: hash - Make crypto_ahash_alg helper available	2023-05-12 18:48:01 +08:00
akcipher.c	crypto: akcipher - Do not copy dst if it is NULL	2023-06-27 17:59:52 +08:00
algapi.c	crypto: engine - fix crypto_queue backlog handling	2023-04-28 17:50:43 +08:00
algboss.c	…
algif_aead.c	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
algif_hash.c	crypto: algif_hash - Fix race between MORE and non-MORE sends	2023-07-08 22:48:42 +10:00
algif_rng.c	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
algif_skcipher.c	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
ansi_cprng.c	…
anubis.c	…
api.c	crypto: api - Add __crypto_alloc_tfmgfp	2023-06-23 16:15:36 +08:00
arc4.c	…
aria_generic.c	crypto: x86/aria - do not use magic number offsets of aria_ctx	2023-01-06 17:15:47 +08:00
authenc.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
authencesn.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
blake2b_generic.c	…
blowfish_common.c	…
blowfish_generic.c	…
camellia_generic.c	…
cast5_generic.c	…
cast6_generic.c	…
cast_common.c	…
cbc.c	…
ccm.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
cfb.c	…
chacha20poly1305.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
chacha_generic.c	…
cipher.c	crypto: cipher - On clone do crypto_mod_get()	2023-06-23 16:15:36 +08:00
cmac.c	crypto: cmac - Add support for cloning	2023-05-24 18:12:33 +08:00
compress.c	…
compress.h	crypto: acomp - Count error stats differently	2023-03-14 17:06:42 +08:00
crc32_generic.c	…
crc32c_generic.c	…
crc64_rocksoft_generic.c	…
crct10dif_common.c	…
crct10dif_generic.c	…
cryptd.c	crypto: cryptd - Add support for cloning hashes	2023-04-20 18:20:04 +08:00
crypto_engine.c	crypto: engine - fix crypto_queue backlog handling	2023-04-28 17:50:43 +08:00
crypto_null.c	…
crypto_user_base.c	…
crypto_user_stat.c	crypto: rng - Count error stats differently	2023-03-14 17:06:42 +08:00
ctr.c	…
cts.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
curve25519-generic.c	…
deflate.c	…
des_generic.c	…
dh.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
dh_helper.c	…
drbg.c	crypto: drbg - Only fail when jent is unavailable in FIPS mode	2023-04-06 16:18:53 +08:00
ecb.c	…
ecc.c	crypto: ecc - Silence sparse warning	2023-02-14 13:39:33 +08:00
ecc_curve_defs.h	…
ecdh.c	…
ecdh_helper.c	…
ecdsa.c	…
ecdsasignature.asn1	…
echainiv.c	…
ecrdsa.c	…
ecrdsa_defs.h	…
ecrdsa_params.asn1	…
ecrdsa_pub_key.asn1	…
essiv.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
fcrypt.c	…
fips.c	crypto: fips - simplify one-level sysctl registration for crypto_sysctl_table	2023-03-17 11:16:44 +08:00
gcm.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
geniv.c	…
ghash-generic.c	…
hash.h	crypto: hash - Add crypto_clone_ahash/shash	2023-04-20 18:20:04 +08:00
hash_info.c	…
hctr2.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
hmac.c	crypto: hmac - Add missing blank line	2023-06-16 20:30:35 +08:00
internal.h	crypto: sig - Fix verify call	2023-06-27 15:40:24 +08:00
jitterentropy-kcapi.c	crypto: jitter - add interface for gathering of raw entropy	2023-05-12 18:48:01 +08:00
jitterentropy-testing.c	crypto: jitter - add interface for gathering of raw entropy	2023-05-12 18:48:01 +08:00
jitterentropy.c	crypto: jitter - correct health test during initialization	2023-06-02 18:21:32 +08:00
jitterentropy.h	crypto: jitter - add interface for gathering of raw entropy	2023-05-12 18:48:01 +08:00
kdf_sp800108.c	…
keywrap.c	…
khazad.c	…
kpp.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
lrw.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
lz4.c	…
lz4hc.c	…
lzo-rle.c	…
lzo.c	…
md4.c	…
md5.c	…
michael_mic.c	…
nhpoly1305.c	…
ofb.c	…
pcbc.c	…
pcrypt.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
poly1305_generic.c	…
polyval-generic.c	…
proc.c	crypto: proc - Print fips status	2023-02-14 13:39:33 +08:00
ripemd.h	…
rmd160.c	…
rng.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
rsa-pkcs1pad.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
rsa.c	crypto: rsa - allow only odd e and restrict value in FIPS mode	2023-06-23 16:15:36 +08:00
rsa_helper.c	…
rsaprivkey.asn1	…
rsapubkey.asn1	…
scatterwalk.c	…
scompress.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
seed.c	…
seqiv.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
serpent_generic.c	…
sha1_generic.c	…
sha3_generic.c	…
sha256_generic.c	…
sha512_generic.c	…
shash.c	crypto: shash - Allow cloning on algorithms with no init_tfm	2023-05-24 18:12:33 +08:00
sig.c	crypto: sig - Fix verify call	2023-06-27 15:40:24 +08:00
simd.c	…
skcipher.c	crypto: api - Fix CRYPTO_USER checks for report function	2023-05-02 18:22:24 +08:00
sm2.c	KEYS: asymmetric: Move sm2 code into x509_public_key	2023-06-23 16:15:37 +08:00
sm2signature.asn1	…
sm3.c	…
sm3_generic.c	…
sm4.c	…
sm4_generic.c	…
streebog_generic.c	…
tcrypt.c	crypto: api - Move low-level functions into algapi.h	2023-04-14 18:59:34 +08:00
tcrypt.h	crypto: tcrypt - include larger key sizes in RFC4106 benchmark	2023-01-20 18:29:31 +08:00
tea.c	…
testmgr.c	crypto: testmgr - Add some test vectors for cmac(camellia)	2023-04-20 18:20:04 +08:00
testmgr.h	crypto: testmgr - Add some test vectors for cmac(camellia)	2023-04-20 18:20:04 +08:00
twofish_common.c	…
twofish_generic.c	…
vmac.c	…
wp512.c	…
xcbc.c	…
xctr.c	…
xor.c	…
xts.c	crypto: api - Use data directly in completion function	2023-02-13 18:35:14 +08:00
xxhash_generic.c	…
zstd.c	…