Ilan Tayari be9113b305 xfrm: Fix memory leak of aead algorithm name ...

commit b588479358ce26f32138e0f0a7ab0678f8e3e601 upstream.

commit 1a6509d99122 ("[IPSEC]: Add support for combined mode algorithms")
introduced aead. The function attach_aead kmemdup()s the algorithm
name during xfrm_state_construct().
However this memory is never freed.
Implementation has since been slightly modified in
commit ee5c23176fcc ("xfrm: Clone states properly on migration")
without resolving this leak.
This patch adds a kfree() call for the aead algorithm name.

Fixes: 1a6509d99122 ("[IPSEC]: Add support for combined mode algorithms")
Signed-off-by: Ilan Tayari <ilant@mellanox.com>
Acked-by: Rami Rosen <roszenrami@gmail.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-05-10 10:26:04 +02:00

..

Kconfig

net/xfrm: remove depends on CONFIG_EXPERIMENTAL

2013-01-11 11:40:03 -08:00

Makefile

…

xfrm_algo.c

ipsec: Replace seqniv with seqiv

2015-08-17 16:53:42 +08:00

xfrm_hash.c

…

xfrm_hash.h

xfrm: hash prefixed policies based on preflen thresholds

2014-09-02 13:29:44 +02:00

xfrm_input.c

net/xfrm_input: fix possible NULL deref of tunnel.ip6->parms.i_key

2020-05-10 10:26:04 +02:00

xfrm_ipcomp.c

net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()

2018-04-08 11:51:59 +02:00

xfrm_output.c

net: preserve IP control block during GSO segmentation

2016-01-31 11:29:00 -08:00

xfrm_policy.c

xfrm: policy: Fix doulbe free in xfrm_policy_timer

2020-04-02 19:02:36 +02:00

xfrm_proc.c

net: clean up snmp stats code

2014-05-07 16:06:05 -04:00

xfrm_replay.c

xfrm: Always zero high-order sequence number bits

2015-05-21 06:56:23 +02:00

xfrm_state.c

xfrm: Fix memory leak of aead algorithm name

2020-05-10 10:26:04 +02:00

xfrm_sysctl.c

net: Don't export sysctls to unprivileged users

2012-11-18 20:30:55 -05:00

xfrm_user.c

xfrm_user: propagate sec ctx allocation errors

2020-05-10 10:26:04 +02:00