]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
authorScott Mayhew <smayhew@redhat.com>
Tue, 28 Apr 2015 20:29:53 +0000 (16:29 -0400)
committerJiri Slaby <jslaby@suse.cz>
Wed, 3 Jun 2015 09:33:13 +0000 (11:33 +0200)
commitd07438719e3e56dc710695c4fe0ec93f6b8de8bc
tree11102a19298b69d425752780fd85fa9a04e0c246
parentcaf4b0e71fe36cdfb9cafd01fd55da3a086f82cd
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures

commit 9507271d960a1911a51683888837d75c171cd91f upstream.

In an environment where the KDC is running Active Directory, the
exported composite name field returned in the context could be large
enough to span a page boundary.  Attaching a scratch buffer to the
decoding xdr_stream helps deal with those cases.

The case where we saw this was actually due to behavior that's been
fixed in newer gss-proxy versions, but we're fixing it here too.

Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
net/sunrpc/auth_gss/gss_rpc_xdr.c