)]}'
{
  "log": [
    {
      "commit": "6fb66b080a2694ac17ed5fc7309136e89c1b0884",
      "tree": "fa1a00b82c4af7d30a417863e3873f9080e63b03",
      "parents": [
        "7e7154ffc2cacf2165fa88f5927d992a85413e6b"
      ],
      "author": {
        "name": "Rabin Vincent",
        "email": "rabin.vincent@axis.com",
        "time": "Fri Dec 19 13:36:08 2014 +0100"
      },
      "committer": {
        "name": "Zefan Li",
        "email": "lizefan@huawei.com",
        "time": "Tue Apr 14 17:33:48 2015 +0800"
      },
      "message": "crypto: af_alg - fix backlog handling\n\ncommit 7e77bdebff5cb1e9876c561f69710b9ab8fa1f7e upstream.\n\nIf a request is backlogged, it\u0027s complete() handler will get called\ntwice: once with -EINPROGRESS, and once with the final error code.\n\naf_alg\u0027s complete handler, unlike other users, does not handle the\n-EINPROGRESS but instead always completes the completion that recvmsg()\nis waiting on.  This can lead to a return to user space while the\nrequest is still pending in the driver.  If userspace closes the sockets\nbefore the requests are handled by the driver, this will lead to\nuse-after-frees (and potential crashes) in the kernel due to the tfm\nhaving been freed.\n\nThe crashes can be easily reproduced (for example) by reducing the max\nqueue length in cryptod.c and running the following (from\nhttp://www.chronox.de/libkcapi.html) on AES-NI capable hardware:\n\n $ while true; do kcapi -x 1 -e -c \u0027__ecb-aes-aesni\u0027 \\\n    -k 00000000000000000000000000000000 \\\n    -p 00000000000000000000000000000000 \u003e/dev/null \u0026 done\n\nSigned-off-by: Rabin Vincent \u003crabin.vincent@axis.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Zefan Li \u003clizefan@huawei.com\u003e\n"
    },
    {
      "commit": "44ce8f87254b3aea12296aa8275b76fa86c07ca6",
      "tree": "c3dd22fe8caeb8d775deda85cdb2739e5945c762",
      "parents": [
        "91f7c8cbc8fd1a4ef69005347e4bc30016cd60ec"
      ],
      "author": {
        "name": "Milan Broz",
        "email": "gmazyland@gmail.com",
        "time": "Tue Jul 29 18:41:09 2014 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Aug 07 12:00:10 2014 -0700"
      },
      "message": "crypto: af_alg - properly label AF_ALG socket\n\ncommit 4c63f83c2c2e16a13ce274ee678e28246bd33645 upstream.\n\nTh AF_ALG socket was missing a security label (e.g. SELinux)\nwhich means that socket was in \"unlabeled\" state.\n\nThis was recently demonstrated in the cryptsetup package\n(cryptsetup v1.6.5 and later.)\nSee https://bugzilla.redhat.com/show_bug.cgi?id\u003d1115120\n\nThis patch clones the sock\u0027s label from the parent sock\nand resolves the issue (similar to AF_BLUETOOTH protocol family).\n\nSigned-off-by: Milan Broz \u003cgmazyland@gmail.com\u003e\nAcked-by: Paul Moore \u003cpaul@paul-moore.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "60063497a95e716c9a689af3be2687d261f115b4",
      "tree": "6ce0d68db76982c53df46aee5f29f944ebf2c320",
      "parents": [
        "148817ba092f9f6edd35bad3c6c6b8e8f90fe2ed"
      ],
      "author": {
        "name": "Arun Sharma",
        "email": "asharma@fb.com",
        "time": "Tue Jul 26 16:09:06 2011 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Jul 26 16:49:47 2011 -0700"
      },
      "message": "atomic: use \u003clinux/atomic.h\u003e\n\nThis allows us to move duplicated code in \u003casm/atomic.h\u003e\n(atomic_inc_not_zero() for now) to \u003clinux/atomic.h\u003e\n\nSigned-off-by: Arun Sharma \u003casharma@fb.com\u003e\nReviewed-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nCc: Ingo Molnar \u003cmingo@elte.hu\u003e\nCc: David Miller \u003cdavem@davemloft.net\u003e\nCc: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nAcked-by: Mike Frysinger \u003cvapier@gentoo.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "0686952458780e8a29d5a75dea03472fe2302c5a",
      "tree": "eb48263a25d8485b64088a6da7ff8b321bb7d0e2",
      "parents": [
        "3c097b800816c0e4c2a34c38f8b2409427770f7a"
      ],
      "author": {
        "name": "Randy Dunlap",
        "email": "randy.dunlap@oracle.com",
        "time": "Tue Dec 21 22:22:40 2010 +1100"
      },
      "committer": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Dec 21 22:22:40 2010 +1100"
      },
      "message": "crypto: af_alg - fix af_alg memory_allocated data type\n\nChange data type to fix warning:\n\ncrypto/af_alg.c:35: warning: initialization from incompatible pointer type\n\nSigned-off-by: Randy Dunlap \u003crandy.dunlap@oracle.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n"
    },
    {
      "commit": "507cad355fc9e426f2846c46a4edca2d22d25f44",
      "tree": "bec333322577366fbf9438e2bc83d536adf2bb21",
      "parents": [
        "6f107b5861ecb09abfa7e2f9927e3884d1d81f91"
      ],
      "author": {
        "name": "Miloslav Trmač",
        "email": "mitr@redhat.com",
        "time": "Wed Dec 08 14:36:19 2010 +0800"
      },
      "committer": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Wed Dec 08 14:36:19 2010 +0800"
      },
      "message": "crypto: af_alg - Make sure sk_security is initialized on accept()ed sockets\n\nSigned-off-by: Miloslav Trmač \u003cmitr@redhat.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n"
    },
    {
      "commit": "03c8efc1ffeb6b82a22c1af8dd908af349563314",
      "tree": "a2538f6c5151ca92aadac3d52d9703d39d254584",
      "parents": [
        "c2f9bff5ace07fbea03a53c6c3253f6c3a81e9f9"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Oct 19 21:12:39 2010 +0800"
      },
      "committer": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Fri Nov 19 17:47:57 2010 +0800"
      },
      "message": "crypto: af_alg - User-space interface for Crypto API\n\nThis patch creates the backbone of the user-space interface for\nthe Crypto API, through a new socket family AF_ALG.\n\nEach session corresponds to one or more connections obtained from\nthat socket.  The number depends on the number of inputs/outputs\nof that particular type of operation.  For most types there will\nbe a s ingle connection/file descriptor that is used for both input\nand output.  AEAD is one of the few that require two inputs.\n\nEach algorithm type will provide its own implementation that plugs\ninto af_alg.  They\u0027re keyed using a string such as \"skcipher\" or\n\"hash\".\n\nIOW this patch only contains the boring bits that is required\nto hold everything together.\n\nThakns to Miloslav Trmac for reviewing this and contributing\nfixes and improvements.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nTested-by: Martin Willi \u003cmartin@strongswan.org\u003e\n"
    }
  ]
}