]> git.ipfire.org Git - people/arne_f/kernel.git/commit
sunrpc: fix 4 more call sites that were using stack memory with a scatterlist
authorScott Mayhew <smayhew@redhat.com>
Fri, 15 Feb 2019 18:42:02 +0000 (13:42 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 23 Feb 2019 08:06:43 +0000 (09:06 +0100)
commitaa1e52cbb1e45dec65c88f370d32362252380f49
tree92a57254b87c44789dd050dae8fc85255171e6bd
parent3a493b762f31fc0c571051cdfb0d80f49498e5fd
sunrpc: fix 4 more call sites that were using stack memory with a scatterlist

commit e7afe6c1d486b516ed586dcc10b3e7e3e85a9c2b upstream.

While trying to reproduce a reported kernel panic on arm64, I discovered
that AUTH_GSS basically doesn't work at all with older enctypes on arm64
systems with CONFIG_VMAP_STACK enabled.  It turns out there still a few
places using stack memory with scatterlists, causing krb5_encrypt() and
krb5_decrypt() to produce incorrect results (or a BUG if CONFIG_DEBUG_SG
is enabled).

Tested with cthon on v4.0/v4.1/v4.2 with krb5/krb5i/krb5p using
des3-cbc-sha1 and arcfour-hmac-md5.

Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/sunrpc/auth_gss/gss_krb5_seqnum.c