ziming zhang 7fce830ecd libceph: prevent potential out-of-bounds writes in handle_auth_session_key() ...

The len field originates from untrusted network packets. Boundary
checks have been added to prevent potential out-of-bounds writes when
decrypting the connection secret or processing service tickets.

[ idryomov: changelog ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

2025-11-27 09:59:49 +01:00

..

crush

libceph: fix crush_choose_firstn() kernel-doc warnings

2024-07-11 16:33:07 +02:00

armor.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

auth_none.c

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_none.h

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_x_protocol.h

libceph: fix some spelling mistakes

2021-06-28 23:49:25 +02:00

auth_x.c

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-11-27 09:59:49 +01:00

auth_x.h

ceph: fix whitespace

2018-08-02 21:33:21 +02:00

auth.c

libceph: remove unnecessary ret variable in ceph_auth_init()

2021-06-28 23:49:25 +02:00

buffer.c

mm: allow !GFP_KERNEL allocations for kvmalloc

2022-01-15 16:30:29 +02:00

ceph_common.c

libceph: drop started parameter of __ceph_open_session()

2025-11-26 23:29:11 +01:00

ceph_hash.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

ceph_strings.c

libceph: introduce connection modes and ms_mode option

2020-12-14 23:21:50 +01:00

cls_lock_client.c

libceph: fix doc warnings in cls_lock_client.c

2021-06-28 23:49:25 +02:00

crypto.c

libceph: Remove unused ceph_crypto_key_encode

2024-11-18 17:34:35 +01:00

crypto.h

libceph: Remove unused ceph_crypto_key_encode

2024-11-18 17:34:35 +01:00

debugfs.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-11-26 23:29:10 +01:00

decode.c

libceph: allow addrvecs with a single NONE/blank address

2021-05-04 16:06:15 +02:00

Kconfig

libceph: Use HMAC-SHA256 library instead of crypto_shash

2025-10-08 23:30:45 +02:00

Makefile

libceph, ceph: implement msgr2.1 protocol (crc and secure modes)

2020-12-14 23:21:50 +01:00

messenger_v1.c

libceph: add empty check to ceph_con_get_out_msg()

2025-10-08 23:30:47 +02:00

messenger_v2.c

ceph: fix crash in process_v2_sparse_read() for encrypted directories

2025-11-27 09:59:34 +01:00

messenger.c

Merge tag 'ceph-for-6.18-rc1' of https://github.com/ceph/ceph-client

2025-10-10 11:30:19 -07:00

mon_client.c

net: replace use of system_wq with system_percpu_wq

2025-09-22 17:40:30 -07:00

msgpool.c

libceph: preallocate message data items

2018-10-22 10:28:22 +02:00

osd_client.c

ceph: Remove osd_client deadcode

2025-04-03 21:35:32 +02:00

osdmap.c

libceph: replace BUG_ON with bounds check for map->max_osd

2025-11-27 09:59:42 +01:00

pagelist.c

libceph: Remove unused ceph_pagelist functions

2024-11-18 17:34:35 +01:00

pagevec.c

libceph: Remove unused pagevec functions

2024-11-18 17:34:35 +01:00

snapshot.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 268

2019-06-05 17:30:29 +02:00

string_table.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

striper.c

rbd: support for object-map and fast-diff

2019-07-08 14:01:45 +02:00