David Disseldorp fffc0fcaeb target/iscsi: avoid NULL dereference in CHAP auth error path ...

commit ce512d79d0 upstream.

If chap_server_compute_md5() fails early, e.g. via CHAP_N mismatch, then
crypto_free_shash() is called with a NULL pointer which gets
dereferenced in crypto_shash_tfm().

Fixes: 69110e3ced ("iscsi-target: Use shash and ahash")
Suggested-by: Markus Elfring <elfring@users.sourceforge.net>
Signed-off-by: David Disseldorp <ddiss@suse.de>
Cc: stable@vger.kernel.org # 4.6+
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-02-22 15:43:49 +01:00

..

iscsi

target/iscsi: avoid NULL dereference in CHAP auth error path

2018-02-22 15:43:49 +01:00

loopback

target: make close_session optional

2016-05-10 01:19:26 -07:00

sbp

sbp-target: Fix second argument of percpu_ida_alloc()

2017-01-12 11:39:30 +01:00

tcm_fc

target/tcm_fc: use CPU affinity for responses

2016-10-21 01:19:44 -07:00

Kconfig

target: Put TCMU under a new config option

2015-04-19 22:41:12 -07:00

Makefile

target: Put TCMU under a new config option

2015-04-19 22:41:12 -07:00

target_core_alua.c

target: fix race during implicit transition work flushes

2017-12-20 10:07:26 +01:00

target_core_alua.h

target: Subsume se_port + t10_alua_tg_pt_gp_member into se_lun

2015-06-01 00:26:38 -07:00

target_core_configfs.c

target: make close_session optional

2016-05-10 01:19:26 -07:00

target_core_device.c

target: Fix NULL dereference during LUN lookup + active I/O shutdown

2017-03-15 10:02:46 +08:00

target_core_fabric_configfs.c

target: Avoid mappedlun symlink creation during lun shutdown

2017-04-21 09:31:21 +02:00

target_core_fabric_lib.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

2015-07-04 14:13:43 -07:00

target_core_file.c

target/file: Do not return error for UNMAP if length is zero

2017-12-20 10:07:29 +01:00

target_core_file.h

target/file: Remove fd_prot bounce buffer

2015-05-30 22:41:42 -07:00

target_core_hba.c

target: Fix target_sense_desc_format NULL pointer dereference

2015-09-24 23:17:23 -07:00

target_core_iblock.c

target: iblock_execute_sync_cache() should use bio_set_op_attrs()

2016-08-07 14:41:02 -06:00

target_core_iblock.h

target: kill struct se_subsystem_dev

2012-11-06 20:55:43 -08:00

target_core_internal.h

target: Fix kref->refcount underflow in transport_cmd_finish_abort

2017-06-29 13:00:30 +02:00

target_core_pr.c

target:fix condition return in core_pr_dump_initiator_port()

2017-12-20 10:07:29 +01:00

target_core_pr.h

target: use 64-bit LUNs

2015-06-15 23:26:01 -07:00

target_core_pscsi.c

target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export

2017-03-26 13:05:57 +02:00

target_core_pscsi.h

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2015-06-23 15:55:44 -07:00

target_core_rd.c

target: need_to_release is always false, remove redundant check and kfree

2016-05-10 01:19:55 -07:00

target_core_rd.h

target/rd: Add support for protection SGL setup + release

2014-01-19 02:22:05 +00:00

target_core_sbc.c

target: Fix compare_and_write_callback handling for non GOOD status

2017-05-20 14:28:34 +02:00

target_core_spc.c

target: Remove enum transport_lunflags_table

2016-03-10 21:48:55 -08:00

target_core_stat.c

configfs: switch ->default groups to a linked list

2016-03-06 16:11:24 +01:00

target_core_tmr.c

target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK

2018-01-17 09:38:54 +01:00

target_core_tpg.c

target: Fix node_acl demo-mode + uncached dynamic shutdown regression

2017-08-16 13:43:17 -07:00

target_core_transport.c

target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK

2018-01-17 09:38:54 +01:00

target_core_ua.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

2015-07-04 14:13:43 -07:00

target_core_ua.h

target: Send UA when changing LUN inventory

2015-06-23 00:43:02 -07:00

target_core_user.c

tcmu: Skip Data-Out blocks before gathering Data-In buffer for BIDI case

2017-04-21 09:31:18 +02:00

target_core_xcopy.c

target: Use correct SCSI status during EXTENDED_COPY exception

2017-02-14 15:25:36 -08:00

target_core_xcopy.h

target: Add support for EXTENDED_COPY copy offload emulation

2013-09-10 16:48:43 -07:00