|
@@ -31,6 +31,11 @@ struct skcipher_sg_list {
|
|
|
struct scatterlist sg[0];
|
|
|
};
|
|
|
|
|
|
+struct skcipher_tfm {
|
|
|
+ struct crypto_skcipher *skcipher;
|
|
|
+ bool has_key;
|
|
|
+};
|
|
|
+
|
|
|
struct skcipher_ctx {
|
|
|
struct list_head tsgl;
|
|
|
struct af_alg_sgl rsgl;
|
|
@@ -387,7 +392,8 @@ static int skcipher_sendmsg(struct socket *sock, struct msghdr *msg,
|
|
|
|
|
|
sgl = list_entry(ctx->tsgl.prev, struct skcipher_sg_list, list);
|
|
|
sg = sgl->sg;
|
|
|
- sg_unmark_end(sg + sgl->cur);
|
|
|
+ if (sgl->cur)
|
|
|
+ sg_unmark_end(sg + sgl->cur - 1);
|
|
|
do {
|
|
|
i = sgl->cur;
|
|
|
plen = min_t(size_t, len, PAGE_SIZE);
|
|
@@ -642,13 +648,6 @@ static int skcipher_recvmsg_sync(struct socket *sock, struct msghdr *msg,
|
|
|
|
|
|
lock_sock(sk);
|
|
|
while (msg_data_left(msg)) {
|
|
|
- sgl = list_first_entry(&ctx->tsgl,
|
|
|
- struct skcipher_sg_list, list);
|
|
|
- sg = sgl->sg;
|
|
|
-
|
|
|
- while (!sg->length)
|
|
|
- sg++;
|
|
|
-
|
|
|
if (!ctx->used) {
|
|
|
err = skcipher_wait_for_data(sk, flags);
|
|
|
if (err)
|
|
@@ -669,6 +668,13 @@ static int skcipher_recvmsg_sync(struct socket *sock, struct msghdr *msg,
|
|
|
if (!used)
|
|
|
goto free;
|
|
|
|
|
|
+ sgl = list_first_entry(&ctx->tsgl,
|
|
|
+ struct skcipher_sg_list, list);
|
|
|
+ sg = sgl->sg;
|
|
|
+
|
|
|
+ while (!sg->length)
|
|
|
+ sg++;
|
|
|
+
|
|
|
skcipher_request_set_crypt(&ctx->req, sg, ctx->rsgl.sg, used,
|
|
|
ctx->iv);
|
|
|
|
|
@@ -748,19 +754,139 @@ static struct proto_ops algif_skcipher_ops = {
|
|
|
.poll = skcipher_poll,
|
|
|
};
|
|
|
|
|
|
+static int skcipher_check_key(struct socket *sock)
|
|
|
+{
|
|
|
+ int err = 0;
|
|
|
+ struct sock *psk;
|
|
|
+ struct alg_sock *pask;
|
|
|
+ struct skcipher_tfm *tfm;
|
|
|
+ struct sock *sk = sock->sk;
|
|
|
+ struct alg_sock *ask = alg_sk(sk);
|
|
|
+
|
|
|
+ lock_sock(sk);
|
|
|
+ if (ask->refcnt)
|
|
|
+ goto unlock_child;
|
|
|
+
|
|
|
+ psk = ask->parent;
|
|
|
+ pask = alg_sk(ask->parent);
|
|
|
+ tfm = pask->private;
|
|
|
+
|
|
|
+ err = -ENOKEY;
|
|
|
+ lock_sock_nested(psk, SINGLE_DEPTH_NESTING);
|
|
|
+ if (!tfm->has_key)
|
|
|
+ goto unlock;
|
|
|
+
|
|
|
+ if (!pask->refcnt++)
|
|
|
+ sock_hold(psk);
|
|
|
+
|
|
|
+ ask->refcnt = 1;
|
|
|
+ sock_put(psk);
|
|
|
+
|
|
|
+ err = 0;
|
|
|
+
|
|
|
+unlock:
|
|
|
+ release_sock(psk);
|
|
|
+unlock_child:
|
|
|
+ release_sock(sk);
|
|
|
+
|
|
|
+ return err;
|
|
|
+}
|
|
|
+
|
|
|
+static int skcipher_sendmsg_nokey(struct socket *sock, struct msghdr *msg,
|
|
|
+ size_t size)
|
|
|
+{
|
|
|
+ int err;
|
|
|
+
|
|
|
+ err = skcipher_check_key(sock);
|
|
|
+ if (err)
|
|
|
+ return err;
|
|
|
+
|
|
|
+ return skcipher_sendmsg(sock, msg, size);
|
|
|
+}
|
|
|
+
|
|
|
+static ssize_t skcipher_sendpage_nokey(struct socket *sock, struct page *page,
|
|
|
+ int offset, size_t size, int flags)
|
|
|
+{
|
|
|
+ int err;
|
|
|
+
|
|
|
+ err = skcipher_check_key(sock);
|
|
|
+ if (err)
|
|
|
+ return err;
|
|
|
+
|
|
|
+ return skcipher_sendpage(sock, page, offset, size, flags);
|
|
|
+}
|
|
|
+
|
|
|
+static int skcipher_recvmsg_nokey(struct socket *sock, struct msghdr *msg,
|
|
|
+ size_t ignored, int flags)
|
|
|
+{
|
|
|
+ int err;
|
|
|
+
|
|
|
+ err = skcipher_check_key(sock);
|
|
|
+ if (err)
|
|
|
+ return err;
|
|
|
+
|
|
|
+ return skcipher_recvmsg(sock, msg, ignored, flags);
|
|
|
+}
|
|
|
+
|
|
|
+static struct proto_ops algif_skcipher_ops_nokey = {
|
|
|
+ .family = PF_ALG,
|
|
|
+
|
|
|
+ .connect = sock_no_connect,
|
|
|
+ .socketpair = sock_no_socketpair,
|
|
|
+ .getname = sock_no_getname,
|
|
|
+ .ioctl = sock_no_ioctl,
|
|
|
+ .listen = sock_no_listen,
|
|
|
+ .shutdown = sock_no_shutdown,
|
|
|
+ .getsockopt = sock_no_getsockopt,
|
|
|
+ .mmap = sock_no_mmap,
|
|
|
+ .bind = sock_no_bind,
|
|
|
+ .accept = sock_no_accept,
|
|
|
+ .setsockopt = sock_no_setsockopt,
|
|
|
+
|
|
|
+ .release = af_alg_release,
|
|
|
+ .sendmsg = skcipher_sendmsg_nokey,
|
|
|
+ .sendpage = skcipher_sendpage_nokey,
|
|
|
+ .recvmsg = skcipher_recvmsg_nokey,
|
|
|
+ .poll = skcipher_poll,
|
|
|
+};
|
|
|
+
|
|
|
static void *skcipher_bind(const char *name, u32 type, u32 mask)
|
|
|
{
|
|
|
- return crypto_alloc_skcipher(name, type, mask);
|
|
|
+ struct skcipher_tfm *tfm;
|
|
|
+ struct crypto_skcipher *skcipher;
|
|
|
+
|
|
|
+ tfm = kzalloc(sizeof(*tfm), GFP_KERNEL);
|
|
|
+ if (!tfm)
|
|
|
+ return ERR_PTR(-ENOMEM);
|
|
|
+
|
|
|
+ skcipher = crypto_alloc_skcipher(name, type, mask);
|
|
|
+ if (IS_ERR(skcipher)) {
|
|
|
+ kfree(tfm);
|
|
|
+ return ERR_CAST(skcipher);
|
|
|
+ }
|
|
|
+
|
|
|
+ tfm->skcipher = skcipher;
|
|
|
+
|
|
|
+ return tfm;
|
|
|
}
|
|
|
|
|
|
static void skcipher_release(void *private)
|
|
|
{
|
|
|
- crypto_free_skcipher(private);
|
|
|
+ struct skcipher_tfm *tfm = private;
|
|
|
+
|
|
|
+ crypto_free_skcipher(tfm->skcipher);
|
|
|
+ kfree(tfm);
|
|
|
}
|
|
|
|
|
|
static int skcipher_setkey(void *private, const u8 *key, unsigned int keylen)
|
|
|
{
|
|
|
- return crypto_skcipher_setkey(private, key, keylen);
|
|
|
+ struct skcipher_tfm *tfm = private;
|
|
|
+ int err;
|
|
|
+
|
|
|
+ err = crypto_skcipher_setkey(tfm->skcipher, key, keylen);
|
|
|
+ tfm->has_key = !err;
|
|
|
+
|
|
|
+ return err;
|
|
|
}
|
|
|
|
|
|
static void skcipher_wait(struct sock *sk)
|
|
@@ -788,24 +914,26 @@ static void skcipher_sock_destruct(struct sock *sk)
|
|
|
af_alg_release_parent(sk);
|
|
|
}
|
|
|
|
|
|
-static int skcipher_accept_parent(void *private, struct sock *sk)
|
|
|
+static int skcipher_accept_parent_nokey(void *private, struct sock *sk)
|
|
|
{
|
|
|
struct skcipher_ctx *ctx;
|
|
|
struct alg_sock *ask = alg_sk(sk);
|
|
|
- unsigned int len = sizeof(*ctx) + crypto_skcipher_reqsize(private);
|
|
|
+ struct skcipher_tfm *tfm = private;
|
|
|
+ struct crypto_skcipher *skcipher = tfm->skcipher;
|
|
|
+ unsigned int len = sizeof(*ctx) + crypto_skcipher_reqsize(skcipher);
|
|
|
|
|
|
ctx = sock_kmalloc(sk, len, GFP_KERNEL);
|
|
|
if (!ctx)
|
|
|
return -ENOMEM;
|
|
|
|
|
|
- ctx->iv = sock_kmalloc(sk, crypto_skcipher_ivsize(private),
|
|
|
+ ctx->iv = sock_kmalloc(sk, crypto_skcipher_ivsize(skcipher),
|
|
|
GFP_KERNEL);
|
|
|
if (!ctx->iv) {
|
|
|
sock_kfree_s(sk, ctx, len);
|
|
|
return -ENOMEM;
|
|
|
}
|
|
|
|
|
|
- memset(ctx->iv, 0, crypto_skcipher_ivsize(private));
|
|
|
+ memset(ctx->iv, 0, crypto_skcipher_ivsize(skcipher));
|
|
|
|
|
|
INIT_LIST_HEAD(&ctx->tsgl);
|
|
|
ctx->len = len;
|
|
@@ -818,7 +946,7 @@ static int skcipher_accept_parent(void *private, struct sock *sk)
|
|
|
|
|
|
ask->private = ctx;
|
|
|
|
|
|
- skcipher_request_set_tfm(&ctx->req, private);
|
|
|
+ skcipher_request_set_tfm(&ctx->req, skcipher);
|
|
|
skcipher_request_set_callback(&ctx->req, CRYPTO_TFM_REQ_MAY_BACKLOG,
|
|
|
af_alg_complete, &ctx->completion);
|
|
|
|
|
@@ -827,12 +955,24 @@ static int skcipher_accept_parent(void *private, struct sock *sk)
|
|
|
return 0;
|
|
|
}
|
|
|
|
|
|
+static int skcipher_accept_parent(void *private, struct sock *sk)
|
|
|
+{
|
|
|
+ struct skcipher_tfm *tfm = private;
|
|
|
+
|
|
|
+ if (!tfm->has_key && crypto_skcipher_has_setkey(tfm->skcipher))
|
|
|
+ return -ENOKEY;
|
|
|
+
|
|
|
+ return skcipher_accept_parent_nokey(private, sk);
|
|
|
+}
|
|
|
+
|
|
|
static const struct af_alg_type algif_type_skcipher = {
|
|
|
.bind = skcipher_bind,
|
|
|
.release = skcipher_release,
|
|
|
.setkey = skcipher_setkey,
|
|
|
.accept = skcipher_accept_parent,
|
|
|
+ .accept_nokey = skcipher_accept_parent_nokey,
|
|
|
.ops = &algif_skcipher_ops,
|
|
|
+ .ops_nokey = &algif_skcipher_ops_nokey,
|
|
|
.name = "skcipher",
|
|
|
.owner = THIS_MODULE
|
|
|
};
|