diff options
| author |   Kees Cook <keescook@chromium.org> | 2014-11-20 17:05:53 -0800 |
|---|---|---|
| committer |   Herbert Xu <herbert@gondor.apana.org.au> | 2014-11-24 22:43:57 +0800 |
| commit | 5d26a105b5a73e5635eae0629b42fa0a90e07b7b (patch) | |
| tree | e1be190c7b5dfc70c57b41f8ecb896dfda7d1e16 /crypto/api.c | |
| parent | crypto: user - Allow get request with empty driver name (diff) | |
| download | linux-dev-5d26a105b5a73e5635eae0629b42fa0a90e07b7b.tar.xz linux-dev-5d26a105b5a73e5635eae0629b42fa0a90e07b7b.zip | |
crypto: prefix module autoloading with "crypto-"
This prefixes all crypto module loading with "crypto-" so we never run
the risk of exposing module auto-loading to userspace via a crypto API,
as demonstrated by Mathias Krause:
https://lkml.org/lkml/2013/3/4/70
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to '')
| -rw-r--r-- | crypto/api.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/api.c b/crypto/api.c index a2b39c5f3649..2a81e98a0021 100644 --- a/crypto/api.c +++ b/crypto/api.c @@ -216,11 +216,11 @@ struct crypto_alg *crypto_larval_lookup(const char *name, u32 type, u32 mask) alg = crypto_alg_lookup(name, type, mask); if (!alg) { - request_module("%s", name); + request_module("crypto-%s", name); if (!((type ^ CRYPTO_ALG_NEED_FALLBACK) & mask & CRYPTO_ALG_NEED_FALLBACK)) - request_module("%s-all", name); + request_module("crypto-%s-all", name); alg = crypto_alg_lookup(name, type, mask); } |