Revision e7afe6c1d486b516ed586dcc10b3e7e3e85a9c2b authored by Scott Mayhew on 15 February 2019, 18:42:02 UTC, committed by J. Bruce Fields on 15 February 2019, 19:56:51 UTC
While trying to reproduce a reported kernel panic on arm64, I discovered that AUTH_GSS basically doesn't work at all with older enctypes on arm64 systems with CONFIG_VMAP_STACK enabled. It turns out there still a few places using stack memory with scatterlists, causing krb5_encrypt() and krb5_decrypt() to produce incorrect results (or a BUG if CONFIG_DEBUG_SG is enabled). Tested with cthon on v4.0/v4.1/v4.2 with krb5/krb5i/krb5p using des3-cbc-sha1 and arcfour-hmac-md5. Signed-off-by: Scott Mayhew <smayhew@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: J. Bruce Fields <bfields@redhat.com>
1 parent 3bf6b57
File | Mode | Size |
---|---|---|
Kconfig | -rw-r--r-- | 1007 bytes |
Makefile | -rw-r--r-- | 351 bytes |
acl.c | -rw-r--r-- | 6.3 KB |
addr.c | -rw-r--r-- | 53.2 KB |
cache.c | -rw-r--r-- | 9.1 KB |
cache.h | -rw-r--r-- | 4.7 KB |
caps.c | -rw-r--r-- | 112.8 KB |
ceph_frag.c | -rw-r--r-- | 401 bytes |
debugfs.c | -rw-r--r-- | 7.7 KB |
dir.c | -rw-r--r-- | 40.5 KB |
export.c | -rw-r--r-- | 5.7 KB |
file.c | -rw-r--r-- | 53.8 KB |
inode.c | -rw-r--r-- | 62.2 KB |
ioctl.c | -rw-r--r-- | 7.4 KB |
ioctl.h | -rw-r--r-- | 3.6 KB |
locks.c | -rw-r--r-- | 12.6 KB |
mds_client.c | -rw-r--r-- | 109.6 KB |
mds_client.h | -rw-r--r-- | 14.2 KB |
mdsmap.c | -rw-r--r-- | 9.2 KB |
quota.c | -rw-r--r-- | 9.1 KB |
snap.c | -rw-r--r-- | 27.3 KB |
strings.c | -rw-r--r-- | 4.2 KB |
super.c | -rw-r--r-- | 28.5 KB |
super.h | -rw-r--r-- | 34.3 KB |
xattr.c | -rw-r--r-- | 29.8 KB |
Computing file changes ...