Re: crypto: use-after-free in hash_sock_destruct_common

From: Herbert Xu
Date: Wed Jan 13 2016 - 01:57:59 EST


On Tue, Jan 12, 2016 at 07:31:03PM +0100, Dmitry Vyukov wrote:
>
> The following program triggers use-after-free in
> hash_sock_destruct_common. This is on master of
> git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git
> (cd7e98414462b9db70067ac29896c58210b13b69). I've also seen a similar
> crash in skcipher_sock_destruct_common.

OK the new compatibility nokey path introduced some new problems.
Please try the following patches.

Thanks,
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt