On Thu, 21 Mar 2024 17:54:44 +0800, Herbert Xu wrote:
> On Thu, Mar 07, 2024 at 10:13:18AM +0300, Roman Smirnov wrote:
> > ecc_get_curve() can return NULL. It is necessary to check
> > for NULL before dereferencing.
> >
> > Found by Linux Verification Center (linuxtesting.org) with Svace.
> >
> > Signed-off-by: Roman Smirnov <[email protected]>
> > Reviewed-by: Sergey Shtylyov <[email protected]>
> > ---
> > crypto/ecc.c | 7 ++++++-
> > 1 file changed, 6 insertions(+), 1 deletion(-)
>
> Please point me to the exact code path where this can happen.
I didn't find a specific path. Several places in the file have this
check:
ecc_make_pub_key()
crypto_ecdh_shared_secret()
I thought it was needed in this place too.