From: Linus Walleij <linus.wall...@linaro.org>

commit 19ced623db2fe91604d69f7d86b03144c5107739 upstream.

The hash buffer is really HASH_BLOCK_SIZE bytes, someone
must have thought that memmove takes n*u32 words by mistake.
Tests work as good/bad as before after this patch.

Cc: Joakim Bech <joakim.b...@linaro.org>
Cc: sta...@vger.kernel.org
Reported-by: David Binderman <linuxdev.baldr...@gmail.com>
Signed-off-by: Linus Walleij <linus.wall...@linaro.org>
Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au>
Signed-off-by: Willy Tarreau <w...@1wt.eu>
---
 drivers/crypto/ux500/hash/hash_core.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/drivers/crypto/ux500/hash/hash_core.c 
b/drivers/crypto/ux500/hash/hash_core.c
index 6789c16..cde4a6e 100644
--- a/drivers/crypto/ux500/hash/hash_core.c
+++ b/drivers/crypto/ux500/hash/hash_core.c
@@ -806,7 +806,7 @@ int hash_process_data(
                                                &device_data->state);
                                memmove(req_ctx->state.buffer,
                                                device_data->state.buffer,
-                                               HASH_BLOCK_SIZE / sizeof(u32));
+                                               HASH_BLOCK_SIZE);
                                if (ret) {
                                        dev_err(device_data->dev, "[%s] "
                                                        "hash_resume_state()"
@@ -858,7 +858,7 @@ int hash_process_data(
 
                        memmove(device_data->state.buffer,
                                        req_ctx->state.buffer,
-                                       HASH_BLOCK_SIZE / sizeof(u32));
+                                       HASH_BLOCK_SIZE);
                        if (ret) {
                                dev_err(device_data->dev, "[%s] "
                                                "hash_save_state()"
-- 
2.8.0.rc2.1.gbe9624a

Reply via email to