crypto: lrw - Fix out-of bounds access on counter overflow
authorOndrej Mosnacek <omosnace@redhat.com>
Thu, 13 Sep 2018 08:51:31 +0000 (10:51 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 13 Nov 2018 19:16:57 +0000 (11:16 -0800)
commitb957cd4d7de6892a35a66c1cf7b5199aafe1b2c9
treeb10f6249621a91bf88f5cd4db1b2dff1d3adc25d
parentd699af340bfdea2a3fa94210dcfe743fa09f2cdd
crypto: lrw - Fix out-of bounds access on counter overflow

commit fbe1a850b3b1522e9fc22319ccbbcd2ab05328d2 upstream.

When the LRW block counter overflows, the current implementation returns
128 as the index to the precomputed multiplication table, which has 128
entries. This patch fixes it to return the correct value (127).

Fixes: 64470f1b8510 ("[CRYPTO] lrw: Liskov Rivest Wagner, a tweakable narrow block cipher mode")
Cc: <stable@vger.kernel.org> # 2.6.20+
Reported-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/lrw.c