• Ye Weihua's avatar
    crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr · d74f9340
    Ye Weihua authored
    KASAN reported this Bug:
    
    	[17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60
    	[17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958
    	...
    	[17619.698934] The buggy address belongs to the variable:
    	[17619.708371]  sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip]
    
    There is a mismatch in hisi_zip when get/set the variable sgl_sge_nr.
    The type of sgl_sge_nr is u16, and get/set sgl_sge_nr by
    param_get/set_int.
    
    Replacing param_get/set_int to param_get/set_ushort can fix this bug.
    
    Fixes: f081fda2 ("crypto: hisilicon - add sgl_sge_nr module param for zip")
    Signed-off-by: default avatarYe Weihua <yeweihua4@huawei.com>
    Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
    d74f9340
zip_crypto.c 19.6 KB