opnsense-src/sys
Mark Johnston 0fcafe8516 eli: Zero pad bytes that arise when certain auth algorithms are used
When authentication is configured, GELI ensures that the amount of data
per sector is a multiple of 16 bytes.  This is done in
eli_metadata_softc().  When the digest size is not a multiple of 16
bytes, this leaves some extra pad bytes at the end of every sector, and
they were not being zeroed before being written to disk.  In particular,
this happens with the HMAC/SHA1, HMAC/RIPEMD160 and HMAC/SHA384 data
authentication algorithms.

This change ensures that they are zeroed before being written to disk.

Reported by:	KMSAN
Reviewed by:	delphij, asomers
MFC after:	2 weeks
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D31170
2021-07-15 12:23:04 -04:00
..
amd64 Clear the accessed bit when copying a managed superpage mapping 2021-07-14 13:06:10 -05:00
arm Revert "Pass the syscall number to capsicum permission-denied signals" 2021-07-10 20:26:01 +01:00
arm64 Assert that valid PTEs are not overwritten when installing a new PTP 2021-07-15 12:17:33 -04:00
bsm
cam cam_iosched: use tunable flag and make a bool really a bool 2021-07-13 14:13:21 -06:00
cddl fbt: Remove some handling for multiple CTF containers 2021-04-02 17:49:13 -04:00
compat linuxkpi: Add spin_trylock_irqsave() macro 2021-07-15 07:52:42 -07:00
conf libkern: import strnstr from libc 2021-07-14 17:55:08 -07:00
contrib zfs: merge openzfs/zfs@07a4c76e9 (master) into main 2021-07-12 23:24:45 +02:00
crypto ossl: Use crypto_cursor_segment(). 2021-05-25 16:59:19 -07:00
ddb fix style nit: space after if 2021-05-05 15:26:09 -06:00
dev hwpmc: mostly clean up cc --analyze 2021-07-15 15:15:55 +00:00
dts dts: Bump the freebsd branding version to 5.13 2021-07-01 18:48:56 +02:00
fs nfsclient: Avoid copying uninitialized bytes into statfs 2021-07-15 12:18:17 -04:00
gdb gdb: report specific stop reason for watchpoints 2021-03-30 11:36:41 -03:00
geom eli: Zero pad bytes that arise when certain auth algorithms are used 2021-07-15 12:23:04 -04:00
gnu Remove the old dts imported tree. 2021-01-15 20:09:55 +01:00
i386 Assert that valid PTEs are not overwritten when installing a new PTP 2021-07-15 12:17:33 -04:00
isa newbus: Move from bus_child_{pnpinfo,location}_src to bus_child_{pnpinfo,location} with sbuf 2021-06-22 20:52:06 -06:00
kern procctl(PROC_ASLR_STATUS): fix vmspace leak 2021-07-15 03:02:50 +03:00
kgssapi opencrypto: Introduce crypto_dispatch_async() 2021-02-08 09:19:19 -05:00
libkern Add missing libkern/strnstr.c file 2021-07-14 17:56:03 -07:00
mips Assert that valid PTEs are not overwritten when installing a new PTP 2021-07-15 12:17:33 -04:00
modules pccard: remove pccard module 2021-07-13 20:39:31 -06:00
net pf: add DIOCGETSTATESV2 2021-07-09 10:29:53 +02:00
net80211 net80211: ieee80211_probereq_ie fix length calculation for hw scans 2021-06-28 12:17:11 +00:00
netgraph Consistently use the SOLISTENING() macro 2021-06-14 17:32:27 -04:00
netinet tcp: TCP_LRO getting bad checksums and sending it in to TCP incorrectly. 2021-07-13 12:45:15 -04:00
netinet6 sctp: Fix errno in case of association setup failures 2021-07-09 23:19:25 +02:00
netipsec ipsec: globalize lft zone and zero out buffers at allocation time 2021-06-28 08:14:26 +00:00
netpfil pf: Constify tag name and queue name helper functions 2021-07-15 12:17:58 -04:00
netsmb netsmb: Avoid a read-after-free in smb_t2_request_int() 2021-05-26 10:45:40 -04:00
nfs Fix panic when using BOOTP to resolve root path. 2021-03-28 14:02:40 -05:00
nfsclient nfs: Cleanup dead files 2021-03-17 06:16:31 +11:00
nfsserver nfs: Cleanup dead files 2021-03-17 06:16:31 +11:00
nlm
ofed Fix LINT kernel build issues after c3987b8ea7 . 2021-07-12 18:00:30 +02:00
opencrypto crypto: Remove now-unused crypto_cursor_seg{base,len}. 2021-06-16 15:23:16 -07:00
powerpc Assert that valid PTEs are not overwritten when installing a new PTP 2021-07-15 12:17:33 -04:00
riscv Assert that valid PTEs are not overwritten when installing a new PTP 2021-07-15 12:17:33 -04:00
rpc Consistently use the SOLISTENING() macro 2021-06-14 17:32:27 -04:00
security mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit 2021-06-29 15:06:45 +02:00
sys Add __diagused 2021-07-15 15:15:54 +00:00
teken
tests tests: Revise FIB lookups per second benchmarking routines 2021-06-17 08:49:09 +02:00
tools makesyscalls.lua: improve generated file style(9) compliance 2021-05-13 13:59:25 -04:00
ufs ffs_softdep: force sync if journal is low in journal_check_space 2021-06-23 23:47:05 +03:00
vm uma: Fix a few problems with KASAN integration 2021-07-09 20:38:50 -04:00
x86 x86: Mark the trapframe as initialized in ipi_bitmap_handler() 2021-07-09 20:38:50 -04:00
xdr
xen x86/xen: remove PVHv1 code 2021-05-17 11:41:21 +02:00
Makefile