Re: crypto: use-after-free in rng_recvmsg

2015-12-30 Thread Stephan Mueller
Am Montag, 28. Dezember 2015, 14:48:48 schrieb Dmitry Vyukov: Hi Dmitry, > Hello, > > On commit a88164345b81292b55a8d4829fdd35c8d611cd7d (Dec 23) > + crypto: algif_skcipher - Use new skcipher interface > + crypto: algif_skcipher - Require setkey before accept(2) > > The following program

crypto: use-after-free in rng_recvmsg

2015-12-28 Thread Dmitry Vyukov
Hello, On commit a88164345b81292b55a8d4829fdd35c8d611cd7d (Dec 23) + crypto: algif_skcipher - Use new skcipher interface + crypto: algif_skcipher - Require setkey before accept(2) The following program triggers use-after-free in rng_recvmsg: // autogenerated by syzkaller