]> Gentwo Git Trees - linux/.git/commit
sunrpc: fix null pointer dereference on zero-length checksum
authorLei Lu <llfamsec@gmail.com>
Mon, 11 Aug 2025 13:58:48 +0000 (21:58 +0800)
committerChuck Lever <chuck.lever@oracle.com>
Sun, 21 Sep 2025 23:24:50 +0000 (19:24 -0400)
commit6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42
tree99bae6afb903ac91c172c8afd503ff1f707e5e2b
parent07e27ad16399afcd693be20211b0dfae63e0615f
sunrpc: fix null pointer dereference on zero-length checksum

In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes
checksum.data to be set to NULL. This triggers a NPD when accessing
checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that
the value of checksum.len is not less than XDR_UNIT.

Fixes: 0653028e8f1c ("SUNRPC: Convert gss_verify_header() to use xdr_stream")
Cc: stable@kernel.org
Signed-off-by: Lei Lu <llfamsec@gmail.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
net/sunrpc/auth_gss/svcauth_gss.c