diff options
| author | Scott Mayhew <smayhew@redhat.com> | 2015-04-28 22:29:53 +0200 |
|---|---|---|
| committer | J. Bruce Fields <bfields@redhat.com> | 2015-05-04 18:02:40 +0200 |
| commit | 9507271d960a1911a51683888837d75c171cd91f (patch) | |
| tree | 51ae70d0b2257ec9e32c78ade5e953dca00acdc2 /fs | |
| parent | nfsd: fix pNFS return on close semantics (diff) | |
| download | linux-9507271d960a1911a51683888837d75c171cd91f.tar.xz linux-9507271d960a1911a51683888837d75c171cd91f.zip | |
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
In an environment where the KDC is running Active Directory, the
exported composite name field returned in the context could be large
enough to span a page boundary. Attaching a scratch buffer to the
decoding xdr_stream helps deal with those cases.
The case where we saw this was actually due to behavior that's been
fixed in newer gss-proxy versions, but we're fixing it here too.
Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Cc: stable@vger.kernel.org
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions