Re: [PATCH] crypto: ansi_cprng: fix cipher leak in cprng_init error path
From: Herbert Xu
Date: Thu Nov 06 2025 - 04:26:09 EST
On Thu, Nov 06, 2025 at 04:48:50PM +0800, Haotian Zhang wrote:
> In the commit referenced by the Fixes tag, crypto_alloc_cipher()
> was moved from reset_prng_context() to cprng_init(). However,
> this approach does not account for the error path: when
> reset_prng_context() fails, crypto_free_cipher() is never called,
> resulting in a resource leak.
>
> Free the allocated cipher before returning on reset_prng_context()
> failure.
>
> Fixes: fd09d7facb7c ("crypto: ansi_prng - alloc cipher just in init")
> Signed-off-by: Haotian Zhang <vulab@xxxxxxxxxxx>
> ---
> crypto/ansi_cprng.c | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
Please instead provide a patch to remove ansi_cprng. It's obsolete
and unused.
Thanks,
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt