2d02a4f5bd
Refresh patches. Adapt 704-phy-no-genphy-soft-reset.patch. Remove brcm2708/950-0005-mm-Remove-the-PFN-busy-warning.patch. Compile-tested on brcm2708/bcm2708 and x86/64. Runtime-tested on brcm2708/bcm2708 and x86/64. Fixes the following vulnerabilities: - CVE-2017-7533 - CVE-2017-1000111 - CVE-2017-1000112 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
62 lines
2.1 KiB
Diff
62 lines
2.1 KiB
Diff
From fd1799b0bf5efa46dd3e6dfbbf3955564807e508 Mon Sep 17 00:00:00 2001
|
|
From: Felix Fietkau <nbd@nbd.name>
|
|
Date: Fri, 7 Jul 2017 17:12:51 +0200
|
|
Subject: kernel: prevent cryptomgr from pulling in useless extra dependencies for tests that are not run
|
|
|
|
Reduces kernel size after LZMA by about 5k on MIPS
|
|
|
|
lede-commit: 044c316167e076479a344c59905e5b435b84a77f
|
|
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|
---
|
|
crypto/Kconfig | 13 ++++++-------
|
|
crypto/algboss.c | 4 ++++
|
|
2 files changed, 10 insertions(+), 7 deletions(-)
|
|
|
|
--- a/crypto/Kconfig
|
|
+++ b/crypto/Kconfig
|
|
@@ -132,12 +132,12 @@ config CRYPTO_MANAGER
|
|
cbc(aes).
|
|
|
|
config CRYPTO_MANAGER2
|
|
- def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
|
|
- select CRYPTO_AEAD2
|
|
- select CRYPTO_HASH2
|
|
- select CRYPTO_BLKCIPHER2
|
|
- select CRYPTO_AKCIPHER2
|
|
- select CRYPTO_KPP2
|
|
+ def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y && !CRYPTO_MANAGER_DISABLE_TESTS)
|
|
+ select CRYPTO_AEAD2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_HASH2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_BLKCIPHER2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_AKCIPHER2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_KPP2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
|
|
config CRYPTO_USER
|
|
tristate "Userspace cryptographic algorithm configuration"
|
|
@@ -150,7 +150,6 @@ config CRYPTO_USER
|
|
config CRYPTO_MANAGER_DISABLE_TESTS
|
|
bool "Disable run-time self tests"
|
|
default y
|
|
- depends on CRYPTO_MANAGER2
|
|
help
|
|
Disable run-time self tests that normally take place at
|
|
algorithm registration.
|
|
--- a/crypto/algboss.c
|
|
+++ b/crypto/algboss.c
|
|
@@ -248,12 +248,16 @@ static int cryptomgr_schedule_test(struc
|
|
type = alg->cra_flags;
|
|
|
|
/* This piece of crap needs to disappear into per-type test hooks. */
|
|
+#ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ type |= CRYPTO_ALG_TESTED;
|
|
+#else
|
|
if (!((type ^ CRYPTO_ALG_TYPE_BLKCIPHER) &
|
|
CRYPTO_ALG_TYPE_BLKCIPHER_MASK) && !(type & CRYPTO_ALG_GENIV) &&
|
|
((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
|
|
CRYPTO_ALG_TYPE_BLKCIPHER ? alg->cra_blkcipher.ivsize :
|
|
alg->cra_ablkcipher.ivsize))
|
|
type |= CRYPTO_ALG_TESTED;
|
|
+#endif
|
|
|
|
param->type = type;
|
|
|