[PATCH] crypto/openssl: fix use-after-free bug and cleanup
Akhil Goyal
gakhil at marvell.com
Tue Jun 2 11:03:45 CEST 2026
> -----Original Message-----
> From: Pratik Senapati <psenapati at marvell.com>
> Sent: Thursday, May 28, 2026 1:28 PM
> To: dev at dpdk.org
> Cc: Akhil Goyal <gakhil at marvell.com>; Anoob Joseph <anoobj at marvell.com>;
> Gowrishankar Muthukrishnan <gmuthukrishn at marvell.com>; kai.ji at intel.com;
> stable at dpdk.org
> Subject: [PATCH] crypto/openssl: fix use-after-free bug and cleanup
>
> params is freed before it is used by
> EVP_PKEY_decapsulate_init() causing a
> use-after-free issue. Pass NULL to
> EVP_PKEY_decapsulate_init() instead of params
> to avoid it.
>
> Add resource cleanup for all error paths in the ML-KEM
> decapsulate handler and consolidate cleanup into
> two goto labels err_pkey and err_decap.
>
> Fixes: 5f761d7b60 ("crypto/openssl: support ML-KEM and ML-DSA")
> Cc: stable at dpdk.org
> Signed-off-by: Pratik Senapati <psenapati at marvell.com>
> ---
Fix compilation.
More information about the dev
mailing list