Commit c0e983b6 authored by Harald Freudenberger's avatar Harald Freudenberger Committed by Alexander Gordeev

s390/zcrypt: Handle ep11 cprb return code

An EP11 reply cprb contains a field ret_code which may
hold an error code different than the error code stored
in the payload of the cprb. As of now all the EP11 misc
functions do not evaluate this field but focus on the
error code in the payload.

Before checking the payload error, first the cprb error
field should be evaluated which is introduced with this
patch.

If the return code value 0x000c0003 is seen, this
indicates a busy situation which is reflected by
-EBUSY in the zcrpyt_ep11misc.c low level function.
A higher level caller should consider to retry after
waiting a dedicated duration (say 1 second).

Fixes: ed6776c9 ("s390/crypto: remove retry loop with sleep from PAES pkey invocation")
Signed-off-by: default avatarHarald Freudenberger <freude@linux.ibm.com>
Reviewed-by: default avatarIngo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: default avatarHolger Dengler <dengler@linux.ibm.com>
Signed-off-by: default avatarAlexander Gordeev <agordeev@linux.ibm.com>
parent a4499998
...@@ -563,6 +563,22 @@ static int check_reply_pl(const u8 *pl, const char *func) ...@@ -563,6 +563,22 @@ static int check_reply_pl(const u8 *pl, const char *func)
return 0; return 0;
} }
/* Check ep11 reply cprb, return 0 or suggested errno value. */
static int check_reply_cprb(const struct ep11_cprb *rep, const char *func)
{
/* check ep11 reply return code field */
if (rep->ret_code) {
ZCRYPT_DBF_ERR("%s ep11 reply ret_code=0x%08x\n", __func__,
rep->ret_code);
if (rep->ret_code == 0x000c0003)
return -EBUSY;
else
return -EIO;
}
return 0;
}
/* /*
* Helper function which does an ep11 query with given query type. * Helper function which does an ep11 query with given query type.
*/ */
...@@ -627,6 +643,12 @@ static int ep11_query_info(u16 cardnr, u16 domain, u32 query_type, ...@@ -627,6 +643,12 @@ static int ep11_query_info(u16 cardnr, u16 domain, u32 query_type,
goto out; goto out;
} }
/* check ep11 reply cprb */
rc = check_reply_cprb(rep, __func__);
if (rc)
goto out;
/* check payload */
rc = check_reply_pl((u8 *)rep_pl, __func__); rc = check_reply_pl((u8 *)rep_pl, __func__);
if (rc) if (rc)
goto out; goto out;
...@@ -877,6 +899,12 @@ static int _ep11_genaeskey(u16 card, u16 domain, ...@@ -877,6 +899,12 @@ static int _ep11_genaeskey(u16 card, u16 domain,
goto out; goto out;
} }
/* check ep11 reply cprb */
rc = check_reply_cprb(rep, __func__);
if (rc)
goto out;
/* check payload */
rc = check_reply_pl((u8 *)rep_pl, __func__); rc = check_reply_pl((u8 *)rep_pl, __func__);
if (rc) if (rc)
goto out; goto out;
...@@ -1028,6 +1056,12 @@ static int ep11_cryptsingle(u16 card, u16 domain, ...@@ -1028,6 +1056,12 @@ static int ep11_cryptsingle(u16 card, u16 domain,
goto out; goto out;
} }
/* check ep11 reply cprb */
rc = check_reply_cprb(rep, __func__);
if (rc)
goto out;
/* check payload */
rc = check_reply_pl((u8 *)rep_pl, __func__); rc = check_reply_pl((u8 *)rep_pl, __func__);
if (rc) if (rc)
goto out; goto out;
...@@ -1185,6 +1219,12 @@ static int _ep11_unwrapkey(u16 card, u16 domain, ...@@ -1185,6 +1219,12 @@ static int _ep11_unwrapkey(u16 card, u16 domain,
goto out; goto out;
} }
/* check ep11 reply cprb */
rc = check_reply_cprb(rep, __func__);
if (rc)
goto out;
/* check payload */
rc = check_reply_pl((u8 *)rep_pl, __func__); rc = check_reply_pl((u8 *)rep_pl, __func__);
if (rc) if (rc)
goto out; goto out;
...@@ -1339,6 +1379,12 @@ static int _ep11_wrapkey(u16 card, u16 domain, ...@@ -1339,6 +1379,12 @@ static int _ep11_wrapkey(u16 card, u16 domain,
goto out; goto out;
} }
/* check ep11 reply cprb */
rc = check_reply_cprb(rep, __func__);
if (rc)
goto out;
/* check payload */
rc = check_reply_pl((u8 *)rep_pl, __func__); rc = check_reply_pl((u8 *)rep_pl, __func__);
if (rc) if (rc)
goto out; goto out;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment