diff options
| author | Scott Mayhew <smayhew@redhat.com> | 2015-04-28 16:29:53 -0400 |
|---|---|---|
| committer | Sasha Levin <sasha.levin@oracle.com> | 2015-06-10 13:42:36 -0400 |
| commit | 74caa044f694e2034394893a3d993f9b90b3e895 (patch) | |
| tree | a33a9be899a640b59b4d72ff4aa238a40b7c8082 /lib | |
| parent | d6244c787f103b95e0f68283c8546afeaa7b046a (diff) | |
| download | lwn-74caa044f694e2034394893a3d993f9b90b3e895.tar.gz lwn-74caa044f694e2034394893a3d993f9b90b3e895.zip | |
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
[ Upstream commit 9507271d960a1911a51683888837d75c171cd91f ]
In an environment where the KDC is running Active Directory, the
exported composite name field returned in the context could be large
enough to span a page boundary. Attaching a scratch buffer to the
decoding xdr_stream helps deal with those cases.
The case where we saw this was actually due to behavior that's been
fixed in newer gss-proxy versions, but we're fixing it here too.
Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Cc: stable@vger.kernel.org
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions