Re: [PATCH v2 2/2] crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()

From: Markus Elfring
Date: Tue May 26 2020 - 03:19:49 EST


> The system'll crash when the users insmod crypto/tcrypto.ko with mode=155
> ( testing "authenc(hmac(sha1),cbc(aes))" ). It's caused by reuse the memory
> of request structure.

Wording adjustments:
* â system will crash â
* â It is caused by reusing the â


> when these memory will be used again.

when this memory â


> â Thus release specific resources before

Is there a need to improve also this information another bit?

Regards,
Markus