Whamcloud - gitweb
LU-15508 gss: protect from arbitrary write to init channel 61/46461/2
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 4 Feb 2022 14:53:35 +0000 (15:53 +0100)
committerOleg Drokin <green@whamcloud.com>
Sat, 11 Jun 2022 05:34:29 +0000 (05:34 +0000)
commitf06807d409c82dd85c208c79c8072402e77f9bac
treeeb395baa93b88210f7ab6ae06f84c00667457468
parent4de9793654ec1b2f08d93f74f7391c4245ab8769
LU-15508 gss: protect from arbitrary write to init channel

In case some arbitrary data was written to the gss init channel,
directly return -EINVAL. This protects against unsolicited
authentication requests, and avoids having a dandling entry
in the auth init cache.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Iadde630012e4ded83f9609fbb3e10b2e092deb57
Reviewed-on: https://review.whamcloud.com/46461
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: James Simmons <jsimmons@infradead.org>
Reviewed-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/ptlrpc/gss/gss_svc_upcall.c