Skip to content

Commit

Permalink
---
Browse files Browse the repository at this point in the history
yaml
---
r: 44498
b: refs/heads/master
c: b797b5b
h: refs/heads/master
v: v3
  • Loading branch information
J.Bruce Fields authored and Linus Torvalds committed Dec 13, 2006
1 parent fe9796e commit 1220c51
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 5 deletions.
2 changes: 1 addition & 1 deletion [refs]
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
---
refs/heads/master: 451c11a161168fbdbba17573d4b062fdd2a4c2c4
refs/heads/master: b797b5beac966df5c5d96c0d39fe366f57135343
9 changes: 5 additions & 4 deletions trunk/net/sunrpc/auth_gss/svcauth_gss.c
Original file line number Diff line number Diff line change
Expand Up @@ -804,19 +804,19 @@ unwrap_integ_data(struct xdr_buf *buf, u32 seq, struct gss_ctx *ctx)

integ_len = svc_getnl(&buf->head[0]);
if (integ_len & 3)
goto out;
return stat;
if (integ_len > buf->len)
goto out;
return stat;
if (xdr_buf_subsegment(buf, &integ_buf, 0, integ_len))
BUG();
/* copy out mic... */
if (read_u32_from_xdr_buf(buf, integ_len, &mic.len))
BUG();
if (mic.len > RPC_MAX_AUTH_SIZE)
goto out;
return stat;
mic.data = kmalloc(mic.len, GFP_KERNEL);
if (!mic.data)
goto out;
return stat;
if (read_bytes_from_xdr_buf(buf, integ_len + 4, mic.data, mic.len))
goto out;
maj_stat = gss_verify_mic(ctx, &integ_buf, &mic);
Expand All @@ -826,6 +826,7 @@ unwrap_integ_data(struct xdr_buf *buf, u32 seq, struct gss_ctx *ctx)
goto out;
stat = 0;
out:
kfree(mic.data);
return stat;
}

Expand Down

0 comments on commit 1220c51

Please sign in to comment.