This push contains the following changes:

- Enforce rx socket buffer limit in af_alg.
- Fix array overflow in af_alg_pull_tsgl.
- Fix out-of-bounds access when parsing extensions in X.509.
- Fix minimum rx size check in algif_aead.
crypto: algif_aead - Fix minimum RX size check for decryption

The check for the minimum receive buffer size did not take the
tag size into account during decryption.  Fix this by adding the
required extra length.

Reported-by: syzbot+aa11561819dc42ebbc7c@syzkaller.appspotmail.com
Reported-by: Daniel Pouzzner <douzzer@mega.nu>
Fixes: d887c52d6ae4 ("crypto: algif_aead - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
1 file changed