Messages in this thread | | | Subject | Re: KASAN: use-after-free Read in sha512_ctx_mgr_resubmit | From | Megha Dey <> | Date | Mon, 27 Aug 2018 16:08:56 -0700 |
| |
On Wed, 2018-08-22 at 14:20 +0800, Herbert Xu wrote: > On Tue, Aug 21, 2018 at 02:43:56PM +0200, Ard Biesheuvel wrote: > > > > I agree. The code is obviously broken in a way that would have been > > noticed if it were in wide use, and it is too complicated for mere > > mortals to fix or maintain. I suggest we simply remove it for now, and > > if anyone wants to reintroduce it, we can review the code *and* the > > justification for the approach from scratch (in which case we should > > consider factoring out the algo agnostics plumbing in a way that > > allows it to be reused by other architectures as well) > > I agree too. Could one of you guys send me a patch to remove > them? >
Hi,
We are working on a fix to solve these corner cases.
-Megha > Thanks,
| |