Re: [PATCH net-next v4] sctp: auth: propagate HMAC calculation errors to callers
| Newsgroups | org.kernel.vger.linux-sctp,org.kernel.vger.linux-kernel,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178643820565.420670.8744676396455318240.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net-next.git (main) by Paolo Abeni <[email protected]>: On Fri, 7 Aug 2026 14:43:14 +0800 you wrote: > From: Qing Luo <[email protected]> > > sctp_auth_calculate_hmac() can fail when building the association secret > under memory pressure, but its void return silently leaves the HMAC digest > zeroed. On the receive path, sctp_sf_authenticate() compares this zeroed > digest against the peer-supplied one using crypto_memneq(), potentially > accepting an all-zero HMAC from the peer if the allocation failed. On the > send path, sctp_packet_pack() transmits a packet with a zeroed HMAC that > the peer would reject. > > [...] Here is the summary with links: - [net-next,v4] sctp: auth: propagate HMAC calculation errors to callers https://git.kernel.org/netdev/net-next/c/5d3ae80ecdde You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html