]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
authorScott Mayhew <smayhew@redhat.com>
Tue, 28 Apr 2015 20:29:53 +0000 (16:29 -0400)
committerSasha Levin <sasha.levin@oracle.com>
Wed, 10 Jun 2015 17:42:36 +0000 (13:42 -0400)
commit74caa044f694e2034394893a3d993f9b90b3e895
treea33a9be899a640b59b4d72ff4aa238a40b7c8082
parentd6244c787f103b95e0f68283c8546afeaa7b046a
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures

[ Upstream commit 9507271d960a1911a51683888837d75c171cd91f ]

In an environment where the KDC is running Active Directory, the
exported composite name field returned in the context could be large
enough to span a page boundary.  Attaching a scratch buffer to the
decoding xdr_stream helps deal with those cases.

The case where we saw this was actually due to behavior that's been
fixed in newer gss-proxy versions, but we're fixing it here too.

Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Cc: stable@vger.kernel.org
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
net/sunrpc/auth_gss/gss_rpc_xdr.c