/*
 * Copyright 2015, Qualcomm Atheros, Inc.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#ifndef AES_GMAC_H
#define AES_GMAC_H

#include <linux/crypto.h>

#define GMAC_AAD_LEN	20
#define GMAC_MIC_LEN	16
#define GMAC_NONCE_LEN	12

struct crypto_aead *ieee80211_aes_gmac_key_setup(const u8 key[],
						 size_t key_len);
int ieee80211_aes_gmac(struct crypto_aead *tfm, const u8 *aad, u8 *nonce,
		       const u8 *data, size_t data_len, u8 *mic);
void ieee80211_aes_gmac_key_free(struct crypto_aead *tfm);

#endif /* AES_GMAC_H */
<a href='/cgit.cgi/'><img src='/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/cgit.cgi/'>index</a> : <a href='/cgit.cgi/linux/net-next.git/'>net-next.git</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='c2985d001d2fb77357aeae675545893b61c50044'/><select name='h' onchange='this.form.submit();'>
<option value='emaclite-cleanup'>emaclite-cleanup</option>
<option value='master' selected='selected'>master</option>
<option value='nds-private-remove'>nds-private-remove</option>
<option value='packet-loop-back'>packet-loop-back</option>
<option value='packet-rx-pump-back'>packet-rx-pump-back</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>net-next plumbings</td><td class='sub right'>Tobias Klauser</td></tr></table>
<table class='tabs'><tr><td>
<a href='/cgit.cgi/linux/net-next.git/'>summary</a><a href='/cgit.cgi/linux/net-next.git/refs/?id=c2985d001d2fb77357aeae675545893b61c50044'>refs</a><a href='/cgit.cgi/linux/net-next.git/log/Documentation/devicetree/bindings'>log</a><a href='/cgit.cgi/linux/net-next.git/tree/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>tree</a><a class='active' href='/cgit.cgi/linux/net-next.git/commit/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>commit</a><a href='/cgit.cgi/linux/net-next.git/diff/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>diff</a></td><td class='form'><form class='right' method='get' action='/cgit.cgi/linux/net-next.git/log/Documentation/devicetree/bindings'>
<input type='hidden' name='id' value='c2985d001d2fb77357aeae675545893b61c50044'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?id=c2985d001d2fb77357aeae675545893b61c50044'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/Documentation?id=c2985d001d2fb77357aeae675545893b61c50044'>Documentation</a>/<a href='/cgit.cgi/linux/net-next.git/commit/Documentation/devicetree?id=c2985d001d2fb77357aeae675545893b61c50044'>devicetree</a>/<a href='/cgit.cgi/linux/net-next.git/commit/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>bindings</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='id' value='c2985d001d2fb77357aeae675545893b61c50044'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Olga Kornievskaia &lt;kolga@netapp.com&gt;</td><td class='right'>2016-05-10 16:57:41 -0400</td></tr>
<tr><th>committer</th><td>Anna Schumaker &lt;Anna.Schumaker@Netapp.com&gt;</td><td class='right'>2016-05-17 15:45:00 -0400</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>c2985d001d2fb77357aeae675545893b61c50044</a> (<a href='/cgit.cgi/linux/net-next.git/patch/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?id=c2985d001d2fb77357aeae675545893b61c50044'>46f632aee813bbce0fa7066ab2c9bef5824291e6</a> /<a href='/cgit.cgi/linux/net-next.git/tree/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044'>Documentation/devicetree/bindings</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/Documentation/devicetree/bindings?id=7e3fcf61abde92a895533b1c6932ad17e073a49c'>7e3fcf61abde92a895533b1c6932ad17e073a49c</a> (<a href='/cgit.cgi/linux/net-next.git/diff/Documentation/devicetree/bindings?id=c2985d001d2fb77357aeae675545893b61c50044&amp;id2=7e3fcf61abde92a895533b1c6932ad17e073a49c'>diff</a>)</td></tr></table>
<div class='commit-subject'>Fixing oops in callback path</div><div class='commit-msg'>Commit 80f9642724af5 ("NFSv4.x: Enforce the ca_maxreponsesize_cached
on the back channel") causes an oops when it receives a callback with
cachethis=yes.

[  109.667378] BUG: unable to handle kernel NULL pointer dereference at 00000000000002c8
[  109.669476] IP: [&lt;ffffffffa08a3e68&gt;] nfs4_callback_compound+0x4f8/0x690 [nfsv4]
[  109.671216] PGD 0
[  109.671736] Oops: 0000 [#1] SMP
[  109.705427] CPU: 1 PID: 3579 Comm: nfsv4.1-svc Not tainted 4.5.0-rc1+ #1
[  109.706987] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/20/2014
[  109.709468] task: ffff8800b4408000 ti: ffff88008448c000 task.ti: ffff88008448c000
[  109.711207] RIP: 0010:[&lt;ffffffffa08a3e68&gt;]  [&lt;ffffffffa08a3e68&gt;] nfs4_callback_compound+0x4f8/0x690 [nfsv4]
[  109.713521] RSP: 0018:ffff88008448fca0  EFLAGS: 00010286
[  109.714762] RAX: ffff880081ee202c RBX: ffff8800b7b5b600 RCX: 0000000000000001
[  109.716427] RDX: 0000000000000008 RSI: 0000000000000008 RDI: 0000000000000000
[  109.718091] RBP: ffff88008448fda8 R08: 0000000000000000 R09: 000000000b000000
[  109.719757] R10: ffff880137786000 R11: ffff8800b7b5b600 R12: 0000000001000000
[  109.721415] R13: 0000000000000002 R14: 0000000053270000 R15: 000000000000000b
[  109.723061] FS:  0000000000000000(0000) GS:ffff880139640000(0000) knlGS:0000000000000000
[  109.724931] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.726278] CR2: 00000000000002c8 CR3: 0000000034d50000 CR4: 00000000001406e0
[  109.727972] Stack:
[  109.728465]  ffff880081ee202c ffff880081ee201c 000000008448fcc0 ffff8800baccb800
[  109.730349]  ffff8800baccc800 ffffffffa08d0380 0000000000000000 0000000000000000
[  109.732211]  ffff8800b7b5b600 0000000000000001 ffffffff81d073c0 ffff880081ee3090
[  109.734056] Call Trace:
[  109.734657]  [&lt;ffffffffa03795d4&gt;] svc_process_common+0x5c4/0x6c0 [sunrpc]
[  109.736267]  [&lt;ffffffffa0379a4c&gt;] bc_svc_process+0x1fc/0x360 [sunrpc]
[  109.737775]  [&lt;ffffffffa08a2c2c&gt;] nfs41_callback_svc+0x10c/0x1d0 [nfsv4]
[  109.739335]  [&lt;ffffffff810cb380&gt;] ? prepare_to_wait_event+0xf0/0xf0
[  109.740799]  [&lt;ffffffffa08a2b20&gt;] ? nfs4_callback_svc+0x50/0x50 [nfsv4]
[  109.742349]  [&lt;ffffffff810a6998&gt;] kthread+0xd8/0xf0
[  109.743495]  [&lt;ffffffff810a68c0&gt;] ? kthread_park+0x60/0x60
[  109.744776]  [&lt;ffffffff816abc4f&gt;] ret_from_fork+0x3f/0x70
[  109.746037]  [&lt;ffffffff810a68c0&gt;] ? kthread_park+0x60/0x60
[  109.747324] Code: cc 45 31 f6 48 8b 85 00 ff ff ff 44 89 30 48 8b 85 f8 fe ff ff 44 89 20 48 8b 9d 38 ff ff ff 48 8b bd 30 ff ff ff 48 85 db 74 4c &lt;4c&gt; 8b af c8 02 00 00 4d 8d a5 08 02 00 00 49 81 c5 98 02 00 00
[  109.754361] RIP  [&lt;ffffffffa08a3e68&gt;] nfs4_callback_compound+0x4f8/0x690 [nfsv4]
[  109.756123]  RSP &lt;ffff88008448fca0&gt;
[  109.756951] CR2: 00000000000002c8
[  109.757738] ---[ end trace 2b8555511ab5dfb4 ]---
[  109.758819] Kernel panic - not syncing: Fatal exception
[  109.760126] Kernel Offset: disabled
[  118.938934] ---[ end Kernel panic - not syncing: Fatal exception

It doesn't unlock the table nor does it set the cps-&gt;clp pointer which
is later needed by nfs4_cb_free_slot().

Fixes: 80f9642724af5 ("NFSv4.x: Enforce the ca_maxresponsesize_cached ...")
CC: stable@vger.kernel.org
Signed-off-by: Olga Kornievskaia &lt;kolga@netapp.com&gt;
Signed-off-by: Anna Schumaker &lt;Anna.Schumaker@Netapp.com&gt;
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?id=c2985d001d2fb77357aeae675545893b61c50044'>Diffstat</a> (limited to 'Documentation/devicetree/bindings')</div><table summary='diffstat' class='diffstat'>