Re: [v2 PATCH] crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
From: Herbert Xu
Date: Tue Jan 13 2026 - 03:05:04 EST
On Wed, Dec 31, 2025 at 04:06:48PM -0500, Xin Long wrote:
>
> BTW, Do you think it might have the similar issue in essiv_aead_crypt()?
>
> if (rctx->assoc && err != -EINPROGRESS && err != -EBUSY)
> kfree(rctx->assoc);
We should fix this, but I believe this dereference (after free) is
harmless.
Thanks,
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt