Commit 01c4e326 authored by Chuck Lever's avatar Chuck Lever

SUNRPC: Obscure Kerberos session key

ctx->Ksess is never used after import has completed. Obscure it
immediately so it cannot be re-used or copied.
Tested-by: default avatarScott Mayhew <smayhew@redhat.com>
Reviewed-by: default avatarSimo Sorce <simo@redhat.com>
Signed-off-by: default avatarChuck Lever <chuck.lever@oracle.com>
parent 7f675ca7
...@@ -550,6 +550,7 @@ gss_import_sec_context_kerberos(const void *p, size_t len, ...@@ -550,6 +550,7 @@ gss_import_sec_context_kerberos(const void *p, size_t len,
ret = gss_import_v1_context(p, end, ctx); ret = gss_import_v1_context(p, end, ctx);
else else
ret = gss_import_v2_context(p, end, ctx, gfp_mask); ret = gss_import_v2_context(p, end, ctx, gfp_mask);
memzero_explicit(&ctx->Ksess, sizeof(ctx->Ksess));
if (ret) { if (ret) {
kfree(ctx); kfree(ctx);
return ret; return ret;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment