crypto: s390/paes - Fix memory leak on CTR final block

JIRA: https://issues.redhat.com/browse/RHEL-106158
Upstream Status: RHEL only

The skcipher_walk_done call on the final CTR block is made with
the argument nbytes instead of 0.  That tells the Crypto API that
paes is not yet done with the processing.  This causes any temporary
memory to be leaked.  Fix this by using 0 instead of nbytes.

This was fixed upstream by commit 6cd87cb ("s390/crypto:
Rework protected key AES for true asynch support").

Signed-off-by: Herbert Xu <herbert.xu@redhat.com>

Author: Herbert Xu

arch/s390/crypto/paes_s390.c

@@ -874,7 +874,7 @@ static int ctr_paes_crypt(struct skcipher_request *req)
 		}
 		memcpy(walk.dst.virt.addr, buf, nbytes);
 		crypto_inc(walk.iv, AES_BLOCK_SIZE);
-		rc = skcipher_walk_done(&walk, nbytes);
+		rc = skcipher_walk_done(&walk, 0);
 	}
 
 	return rc;