]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
libceph: check authorizer reply/challenge length before reading
authorIlya Dryomov <idryomov@gmail.com>
Fri, 27 Jul 2018 17:40:30 +0000 (19:40 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 8 Dec 2018 12:05:10 +0000 (13:05 +0100)
commite190b826f93c23ed48de7b41f4a1d9180ddbfeec
tree954a8b54dd280d63d48ef089885ac0905b2fd8ce
parent985a55126453f55299cc55fcfffbeb157eb42c59
libceph: check authorizer reply/challenge length before reading

commit 130f52f2b203aa0aec179341916ffb2e905f3afd upstream.

Avoid scribbling over memory if the received reply/challenge is larger
than the buffer supplied with the authorizer.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Sage Weil <sage@redhat.com>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ceph/messenger.c