kms: fix possible deadlock due to nested RLock calls. (minio#16136)

Signed-off-by: Andreas Auernhammer <[email protected]>
bood · Nov 28, 2022 · 9b1e70e · 9b1e70e
1 parent 09d4f8c
commit 9b1e70e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/internal/kms/kes.go b/internal/kms/kes.go
@@ -303,7 +303,11 @@ func (c *kesClient) DecryptAll(ctx context.Context, keyID string, ciphertexts []
 
 	plaintexts := make([][]byte, 0, len(ciphertexts))
 	for i := range ciphertexts {
-		plaintext, err := c.DecryptKey(keyID, ciphertexts[i], contexts[i])
+		ctxBytes, err := contexts[i].MarshalText()
+		if err != nil {
+			return nil, err
+		}
+		plaintext, err := c.client.Decrypt(ctx, keyID, ciphertexts[i], ctxBytes)
 		if err != nil {
 			return nil, err
 		}