Re: [PATCH] crypto: ecc: fix NULL pointer dereferencing in ecc_gen_privkey()

From: Herbert Xu
Date: Thu Mar 21 2024 - 05:55:01 EST


On Thu, Mar 07, 2024 at 10:13:18AM +0300, Roman Smirnov wrote:
> ecc_get_curve() can return NULL. It is necessary to check
> for NULL before dereferencing.
>
> Found by Linux Verification Center (linuxtesting.org) with Svace.
>
> Signed-off-by: Roman Smirnov <r.smirnov@xxxxxx>
> Reviewed-by: Sergey Shtylyov <s.shtylyov@xxxxxx>
> ---
> crypto/ecc.c | 7 ++++++-
> 1 file changed, 6 insertions(+), 1 deletion(-)

Please point me to the exact code path where this can happen.

Thanks,
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt