Herbert Xu 7361d1bc30 lib/mpi: Fix buffer overrun when SG is too long ... The helper mpi_read_raw_from_sgl sets the number of entries in the SG list according to nbytes. However, if the last entry in the SG list contains more data than nbytes, then it may overrun the buffer because it only allocates enough memory for nbytes. Fixes: 2d4d1eea54 ("lib/mpi: Add mpi sgl helpers") Reported-by: Roberto Sassu <roberto.sassu@huaweicloud.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>		2023-01-06 17:15:46 +08:00
..
ec.c
generic_mpih-add1.c
generic_mpih-lshift.c
generic_mpih-mul1.c
generic_mpih-mul2.c
generic_mpih-mul3.c
generic_mpih-rshift.c
generic_mpih-sub1.c
longlong.h
Makefile
mpi-add.c	crypto: rsa - implement Chinese Remainder Theorem for faster private key operations	2022-06-24 17:12:29 +08:00
mpi-bit.c	lib/mpi: export mpi_rshift	2022-03-03 10:47:52 +12:00
mpi-cmp.c
mpi-div.c
mpi-inline.h
mpi-internal.h
mpi-inv.c
mpi-mod.c	lib/mpi: Add the return value check of kcalloc()	2022-01-07 14:30:01 +11:00
mpi-mul.c	crypto: rsa - implement Chinese Remainder Theorem for faster private key operations	2022-06-24 17:12:29 +08:00
mpi-pow.c
mpi-sub-ui.c
mpicoder.c	lib/mpi: Fix buffer overrun when SG is too long	2023-01-06 17:15:46 +08:00
mpih-cmp.c
mpih-div.c
mpih-mul.c
mpiutil.c	lib/mpi: fix typo 'the the' in comment	2022-07-29 18:12:35 -07:00