Whamcloud - gitweb
LU-15508 gss: protect from arbitrary write to init channel 68/47668/2
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 4 Feb 2022 14:53:35 +0000 (15:53 +0100)
committerOleg Drokin <green@whamcloud.com>
Sat, 10 Sep 2022 00:53:34 +0000 (00:53 +0000)
commite4d038ea10fe11a8f1aeccaf4846a71ea384f1aa
tree0baec032eb413271e2227b2be6687074dd65b512
parent3cefc9413d615d2803cff1d27ef736d19391e816
LU-15508 gss: protect from arbitrary write to init channel

In case some arbitrary data was written to the gss init channel,
directly return -EINVAL. This protects against unsolicited
authentication requests, and avoids having a dandling entry
in the auth init cache.

Lustre-change: https://review.whamcloud.com/46461
Lustre-commit: f06807d409c82dd85c208c79c8072402e77f9bac

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Iadde630012e4ded83f9609fbb3e10b2e092deb57
Reviewed-by: James Simmons <jsimmons@infradead.org>
Reviewed-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Reviewed-on: https://review.whamcloud.com/47668
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Yang Sheng <ys@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/ptlrpc/gss/gss_svc_upcall.c