diff options
author | Herbert Xu <herbert@gondor.apana.org.au> | 2017-04-10 17:15:48 +0800 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2017-04-10 19:09:17 +0800 |
commit | 4702bbeefb490e315189636a5588628c1151223d (patch) | |
tree | c0c35538cd7fc5c2ea5041171440157cea22055b /usr | |
parent | aa4a829bdaced81e70c215a84ef6595ce8bd4308 (diff) |
crypto: lrw - Fix use-after-free on EINPROGRESS
When we get an EINPROGRESS completion in lrw, we will end up marking
the request as done and freeing it. This then blows up when the
request is really completed as we've already freed the memory.
Fixes: 700cb3f5fe75 ("crypto: lrw - Convert to skcipher")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'usr')
0 files changed, 0 insertions, 0 deletions