[PATCH] crypto/ipsec_mb: fix buffer overrun

Power, Ciara ciara.power at intel.com
Mon Jan 24 17:08:18 CET 2022


Hi Pablo,

>-----Original Message-----
>From: De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>
>Sent: Thursday 20 January 2022 17:05
>To: Zhang, Roy Fan <roy.fan.zhang at intel.com>; Power, Ciara
><ciara.power at intel.com>
>Cc: dev at dpdk.org; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>;
>stable at dpdk.org
>Subject: [PATCH] crypto/ipsec_mb: fix buffer overrun
>
>Memory for ZUC cipher/auth key in session had to be expanded to 32 bytes,
>instead of 16 bytes, when adding ZUC-256 support.
>However, impact is low as this memory is part of a union with bigger size than
>32 bytes.
>
>Coverity issue: 374374
>Coverity issue: 374379
>Fixes: 8c835018de84 ("crypto/ipsec_mb: support ZUC-256 for aesni_mb")
>Cc: stable at dpdk.org
>
>Signed-off-by: Pablo de Lara <pablo.de.lara.guarch at intel.com>
<snip>

Acked-by: Ciara Power <ciara.power at intel.com>


More information about the stable mailing list