summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHerbert Xu <herbert@gondor.apana.org.au>2019-12-06 13:55:17 +0800
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2020-02-11 04:34:01 -0800
commit12fa296ad27e784d8a9201c953a3e3b2542a75b1 (patch)
tree81cd425ea1eeba2de5a57a635d32b61b6175f797
parentf3f9cfca057af9635c23c31b38c1c3e6a34a5319 (diff)
downloadlinux-stable-12fa296ad27e784d8a9201c953a3e3b2542a75b1.tar.gz
linux-stable-12fa296ad27e784d8a9201c953a3e3b2542a75b1.tar.bz2
linux-stable-12fa296ad27e784d8a9201c953a3e3b2542a75b1.zip
crypto: api - Check spawn->alg under lock in crypto_drop_spawn
commit 7db3b61b6bba4310f454588c2ca6faf2958ad79f upstream. We need to check whether spawn->alg is NULL under lock as otherwise the algorithm could be removed from under us after we have checked it and found it to be non-NULL. This could cause us to remove the spawn from a non-existent list. Fixes: 7ede5a5ba55a ("crypto: api - Fix crypto_drop_spawn crash...") Cc: <stable@vger.kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
-rw-r--r--crypto/algapi.c6
1 files changed, 2 insertions, 4 deletions
diff --git a/crypto/algapi.c b/crypto/algapi.c
index c0755cf4f53f..6d578b7e59a4 100644
--- a/crypto/algapi.c
+++ b/crypto/algapi.c
@@ -649,11 +649,9 @@ EXPORT_SYMBOL_GPL(crypto_grab_spawn);
void crypto_drop_spawn(struct crypto_spawn *spawn)
{
- if (!spawn->alg)
- return;
-
down_write(&crypto_alg_sem);
- list_del(&spawn->list);
+ if (spawn->alg)
+ list_del(&spawn->list);
up_write(&crypto_alg_sem);
}
EXPORT_SYMBOL_GPL(crypto_drop_spawn);