[PATCH v1 0/2] s390/zcrypt: Validate length in CCA key requests

[Holger Dengler <dengler@linux.ibm.com>]

The series contains two missing length field validations for requests
with CCA AES cipher keys and CCA ECC private keys. In both cases, the
length information is used to copy the payload to the request block
without checking the available space. Malformed requests can so cause
out-of-band writes on the heap.

This series applies on top of Linus' master branch.

Holger Dengler (2):
  s390/zcrypt: Validate length for CCA AES cipher key requests
  s390/zcrypt: Validate length for CCA ECC private key requests

 drivers/s390/crypto/zcrypt_ccamisc.c | 6 ++++++
 1 file changed, 6 insertions(+)


base-commit: fc02acf6ac0ccde0c805c2daa9148683cdd01ba8
-- 
2.55.0