Ilya Dryomov e190b826f9 libceph: check authorizer reply/challenge length before reading ...

commit 130f52f2b2 upstream.

Avoid scribbling over memory if the received reply/challenge is larger
than the buffer supplied with the authorizer.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Sage Weil <sage@redhat.com>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-12-08 13:05:10 +01:00

..

crush

crush: remove redundant local variable

2016-10-05 23:02:10 +02:00

armor.c

…

auth_none.c

libceph: rename ceph_entity_name_encode() -> ceph_auth_entity_name_encode()

2016-08-24 23:49:15 +02:00

auth_none.h

…

auth_x_protocol.h

libceph: add authorizer challenge

2018-12-08 13:05:10 +01:00

auth_x.c

libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()

2018-12-08 13:05:10 +01:00

auth_x.h

libceph: rename and align ceph_x_authorizer::reply_buf

2017-01-26 08:24:41 +01:00

auth.c

libceph: add authorizer challenge

2018-12-08 13:05:10 +01:00

buffer.c

…

ceph_common.c

rbd: add 'client_addr' sysfs rbd device attribute

2016-08-24 23:49:16 +02:00

ceph_fs.c

libceph: fix legacy layout decode with pool 0

2016-11-10 20:13:08 +01:00

ceph_hash.c

…

ceph_strings.c

rbd: support for exclusive-lock feature

2016-08-24 23:49:16 +02:00

cls_lock_client.c

libceph: support for lock.lock_info

2016-08-24 23:49:15 +02:00

crypto.c

libceph: don't WARN() if user tries to add invalid key

2017-11-30 08:39:03 +00:00

crypto.h

libceph: stop allocating a new cipher on every crypto request

2017-01-26 08:24:46 +01:00

debugfs.c

libceph: rados pool namespace support

2016-07-28 02:55:37 +02:00

Kconfig

…

Makefile

libceph: support for advisory locking on RADOS objects

2016-08-24 23:49:15 +02:00

messenger.c

libceph: check authorizer reply/challenge length before reading

2018-12-08 13:05:10 +01:00

mon_client.c

libceph: reschedule a tick in finish_hunting()

2018-05-01 15:13:08 -07:00

msgpool.c

…

osd_client.c

libceph: add authorizer challenge

2018-12-08 13:05:10 +01:00

osdmap.c

libceph: NULL deref on crush_decode() error path

2018-04-13 19:48:05 +02:00

pagelist.c

…

pagevec.c

mm: replace get_user_pages_unlocked() write/force parameters with gup_flags

2016-10-18 14:13:37 -07:00

snapshot.c

…

string_table.c

libceph: using kfree_rcu() to simplify the code

2016-08-08 21:41:42 +02:00