Martijn de Gouw af74b4a25f SUNRPC: fix copying of multiple pages in gss_read_proxy_verf() ... [ Upstream commit d48c812474 ] When the passed token is longer than 4032 bytes, the remaining part of the token must be copied from the rqstp->rq_arg.pages. But the copy must make sure it happens in a consecutive way. With the existing code, the first memcpy copies 'length' bytes from argv->iobase, but since the header is in front, this never fills the whole first page of in_token->pages. The mecpy in the loop copies the following bytes, but starts writing at the next page of in_token->pages. This leaves the last bytes of page 0 unwritten. Symptoms were that users with many groups were not able to access NFS exports, when using Active Directory as the KDC. Signed-off-by: Martijn de Gouw <martijn.de.gouw@prodrive-technologies.com> Fixes: 5866efa8cb "SUNRPC: Fix svcauth_gss_proxy_init()" Signed-off-by: J. Bruce Fields <bfields@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-10-30 10:38:23 +01:00
..
auth_gss	SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()	2020-10-30 10:38:23 +01:00
xprtrdma	svcrdma: fix bounce buffers for unaligned offsets and multiple pages	2020-10-30 10:38:22 +01:00
addr.c	net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'	2020-06-25 15:33:00 +02:00
auth_generic.c
auth_null.c
auth_unix.c
auth.c
backchannel_rqst.c
cache.c
clnt.c
debugfs.c
Kconfig
Makefile
netns.h
rpc_pipe.c	sunrpc: fixed rollback in rpc_gssd_dummy_populate()	2020-06-30 23:17:18 -04:00
rpcb_clnt.c	SUNRPC: stop printk reading past end of string	2020-09-23 12:10:58 +02:00
sched.c
socklib.c
stats.c
sunrpc_syms.c
sunrpc.h
svc_xprt.c	SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'	2020-10-01 13:14:40 +02:00
svc.c
svcauth_unix.c
svcauth.c
svcsock.c
sysctl.c
timer.c
xdr.c	SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()	2020-06-30 23:17:18 -04:00
xprt.c
xprtmultipath.c
xprtsock.c