Searched hist:"0 ddc9423" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/net/sunrpc/auth_gss/ |
| H A D | svcauth_gss.c | 0ddc9423 Tue Mar 02 09:48:38 CST 2021 J. Bruce Fields <bfields@redhat.com> rpc: fix NULL dereference on kmalloc failure
I think this is unlikely but possible:
svc_authenticate sets rq_authop and calls svcauth_gss_accept. The
kmalloc(sizeof(*svcdata), GFP_KERNEL) fails, leaving rq_auth_data NULL,
and returning SVC_DENIED.
This causes svc_process_common to go to err_bad_auth, and eventually
call svc_authorise. That calls ->release == svcauth_gss_release, which
tries to dereference rq_auth_data.
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Link: https://lore.kernel.org/linux-nfs/3F1B347F-B809-478F-A1E9-0BE98E22B0F0@oracle.com/T/#t
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
|