Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755491AbcCUNLC (ORCPT ); Mon, 21 Mar 2016 09:11:02 -0400 Received: from mail-wm0-f68.google.com ([74.125.82.68]:33244 "EHLO mail-wm0-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755215AbcCUNLA (ORCPT ); Mon, 21 Mar 2016 09:11:00 -0400 From: Nicolai Stange To: Herbert Xu Cc: Nicolai Stange , Tadeusz Struk , Michal Marek , Andrzej Zaborowski , Stephan Mueller , Arnd Bergmann , linux-kernel@vger.kernel.org Subject: Re: [PATCH v2 00/14] lib/mpi: bug fixes and cleanup References: <1458477095-4619-1-git-send-email-nicstange@gmail.com> <20160321125755.GA5751@gondor.apana.org.au> Date: Mon, 21 Mar 2016 14:10:57 +0100 In-Reply-To: <20160321125755.GA5751@gondor.apana.org.au> (Herbert Xu's message of "Mon, 21 Mar 2016 20:57:56 +0800") Message-ID: <87twk0rn6m.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.92 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1043 Lines: 31 Herbert Xu writes: > On Sun, Mar 20, 2016 at 01:31:21PM +0100, Nicolai Stange wrote: >> The original v1 can be found here: >> >> http://lkml.kernel.org/g/1458237606-4954-1-git-send-email-nicstange@gmail.com >> >> >> While v1 (hopefully) fixed some issues in mpi_write_sgl() and >> mpi_read_buffer() introduced by >> commit 2d4d1eea540b ("lib/mpi: Add mpi sgl helpers") and by >> commit 9cbe21d8f89d ("lib/mpi: only require buffers as big as needed for >> the integer"), >> I missed that there are some, including out-of-bounds buffer accesses, >> in mpi_read_raw_from_sgl() as well. >> >> Hence v2, which includes the original stuff from v1 plus my new fixes to >> mpi_read_raw_from_sgl(). >> >> >> Applicable to linux-next-20160318. > > If you want these to go through the crypto tree please post them > to linux-crypto@vger.kernel.org. Thank you for your reply! Actually I've been unsure where to send this since MAINTAINERS doesn't say anything about lib/mpi/. Nicolai