Chuck Lever 4dd9daa912 SUNRPC: Fix crasher in unwrap_integ_data() ...

If a zero length is passed to kmalloc() it returns 0x10, which is
not a valid address. gss_verify_mic() subsequently crashes when it
attempts to dereference that pointer.

Instead of allocating this memory on every call based on an
untrusted size value, use a piece of dynamically-allocated scratch
memory that is always available.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Reviewed-by: Jeff Layton <jlayton@kernel.org>

2022-12-10 11:01:13 -05:00

..

auth_gss_internal.h

SUNRPC/auth_gss: Convert GFP_NOFS to GFP_KERNEL

2022-02-25 18:50:12 -05:00

auth_gss.c

SUNRPC: Fix crasher in gss_unwrap_resp_integ()

2022-10-27 15:52:10 -04:00

gss_generic_token.c

sunrpc: Remove unneeded null check

2022-01-06 14:00:20 -05:00

gss_krb5_crypto.c

SUNRPC/auth_gss: Convert GFP_NOFS to GFP_KERNEL

2022-02-25 18:50:12 -05:00

gss_krb5_keys.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

gss_krb5_mech.c

SUNRPC: Move simple_get_bytes and simple_get_netobj into private header

2021-01-25 15:59:12 -05:00

gss_krb5_seal.c

SUNRPC: remove RC4-HMAC-MD5 support from KerberosV

2020-09-11 14:39:15 +10:00

gss_krb5_seqnum.c

SUNRPC/auth_gss: Convert GFP_NOFS to GFP_KERNEL

2022-02-25 18:50:12 -05:00

gss_krb5_unseal.c

SUNRPC: remove RC4-HMAC-MD5 support from KerberosV

2020-09-11 14:39:15 +10:00

gss_krb5_wrap.c

treewide: use get_random_u32() when possible

2022-10-11 17:42:58 -06:00

gss_mech_switch.c

sunrpc: clean up properly in gss_mech_unregister()

2020-05-28 18:15:00 -04:00

gss_rpc_upcall.c

SUNRPC: Ensure that the gssproxy client can start in a connected state

2022-05-07 14:31:15 -04:00

gss_rpc_upcall.h

SUNRPC: Add SPDX IDs to some net/sunrpc/auth_gss/ files

2019-02-14 09:54:37 -05:00

gss_rpc_xdr.c

SUNRPC: Remove XDRBUF_SPARSE_PAGES flag in gss_proxy upcall

2020-12-09 09:38:34 -05:00

gss_rpc_xdr.h

SUNRPC: Add SPDX IDs to some net/sunrpc/auth_gss/ files

2019-02-14 09:54:37 -05:00

Makefile

SUNRPC: Introduce trace points in rpc_auth_gss.ko

2019-02-14 09:20:40 -05:00

svcauth_gss.c

SUNRPC: Fix crasher in unwrap_integ_data()

2022-12-10 11:01:13 -05:00

trace.c

SUNRPC: remove duplicate include

2020-08-19 13:19:42 -04:00