Tobias Stoeckmann 44d5269c0a Prevent double free with invalid verity partition. ...

It is possible to trigger a double free with an invalid verity
partition. All it takes is an unknown hash algorithm, which makes it
a bit more likely than a completely broken partition header. But all
it takes is an error return value of VERITY_read_sb() or strdup().

If crypt_load fails before setting cd->type, crypt_free will handle
the union as if it was of type "none", which means it will call free()
for "active_name", a field which is only properly set up when the
type was actually "none".

In all other cases, "active_name" contains the first 4 or 8 bytes of
the actually used header structure. Fortunately it can be only a
pointer or NULL, so an attacker has no direct control of the value.
Nonetheless it can easily trigger a double free.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

2017-05-02 08:25:40 +02:00

..

crypto_backend

Update copyright years.

2017-03-12 13:17:15 +01:00

loopaes

Update copyright years.

2017-03-12 13:17:15 +01:00

luks1

Fix luksFormat if running in FIPS mode on recent kernel.

2017-04-21 08:22:29 +02:00

tcrypt

Fix access to unaligned hidden TrueCrypt header.

2017-03-27 12:04:31 +02:00

verity

Prevent double free with invalid verity partition.

2017-05-02 08:25:40 +02:00

bitops.h

Update bitops.h (stolen from util-linux:).

2013-01-13 19:28:36 +01:00

crypt_plain.c

Update copyright years.

2017-03-12 13:17:15 +01:00

internal.h

Fix AF prototypes and move then to af.h.

2017-04-14 13:25:21 +02:00

libcryptsetup.h

Add FEC offset parameter for verity.

2017-04-03 12:34:50 +02:00

libcryptsetup.pc.in

Increase library version (current++, age++).

2010-11-15 16:54:44 +00:00

libcryptsetup.sym

Remove last error handling (error is logged).

2015-11-20 09:18:58 +01:00

libdevmapper.c

Add check for FEC support in kernel dm-verity.

2017-04-05 15:16:13 +02:00

Makefile.am

Get rid of libfipscheck library.

2015-01-12 21:56:44 +01:00

nls.h

Version 1.4.2.

2012-04-02 22:03:05 +02:00

random.c

Update copyright years.

2017-03-12 13:17:15 +01:00

setup.c

Prevent double free with invalid verity partition.

2017-05-02 08:25:40 +02:00

utils_benchmark.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_crypt.c

Fix AF prototypes and move then to af.h.

2017-04-14 13:25:21 +02:00

utils_crypt.h

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_device.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_devpath.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_dm.h

Add check for FEC support in kernel dm-verity.

2017-04-05 15:16:13 +02:00

utils_fips.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_fips.h

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_loop.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_loop.h

Update copyright years.

2017-03-12 13:17:15 +01:00

utils_wipe.c

Update copyright years.

2017-03-12 13:17:15 +01:00

utils.c

Get rid of old alignment code and use posix_memalign.

2017-04-30 13:13:46 +02:00

volumekey.c

Update copyright years.

2017-03-12 13:17:15 +01:00