Cen Zhang 8697c431e2 KEYS: encrypted: fix integer overflow of datablob_len ... encrypted_key_alloc() stores datablob_len in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16_MAX, the assignment truncates the allocation size. KASAN reports a 32760-byte slab-out-of-bounds write when __ekey_init() copies the master key description into the undersized buffer. The total payload length stored in key->datalen is also a u16. Use check_add_overflow() to reject values that do not fit either destination, and use kzalloc_flex() for the flexible-array allocation. Fixes: 7e70cb4978 ("keys: add new key-type encrypted") Cc: stable@vger.kernel.org Assisted-by: GitHub-Copilot:claude-opus-4.6 Signed-off-by: Cen Zhang <cenzhang@linux.microsoft.com> Signed-off-by: Francis Perron <francis@akrites.dev> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Tested-by: R Nageswara Sastry <rnsastry@linux.ibm.com> Link: https://lore.kernel.org/r/20260909153433.83117-1-cenzhang@linux.microsoft.com Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>		2026-09-12 00:43:45 +03:00
..
ecryptfs_format.c	keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok	2025-11-27 23:50:20 +02:00
ecryptfs_format.h	Replace HTTP links with HTTPS ones: security	2020-08-06 12:00:05 -07:00
encrypted.c	KEYS: encrypted: fix integer overflow of datablob_len	2026-09-12 00:43:45 +03:00
encrypted.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
masterkey_trusted.c	Replace HTTP links with HTTPS ones: security	2020-08-06 12:00:05 -07:00