Jeff Layton 4c190e2f91 sunrpc: trim off trailing checksum before returning decrypted or integrity authenticated buffer ... When GSSAPI integrity signatures are in use, or when we're using GSSAPI privacy with the v2 token format, there is a trailing checksum on the xdr_buf that is returned. It's checked during the authentication stage, and afterward nothing cares about it. Ordinarily, it's not a problem since the XDR code generally ignores it, but it will be when we try to compute a checksum over the buffer to help prevent XID collisions in the duplicate reply cache. Fix the code to trim off the checksums after verifying them. Note that in unwrap_integ_data, we must avoid trying to reverify the checksum if the request was deferred since it will no longer be present when it's revisited. Signed-off-by: Jeff Layton <jlayton@redhat.com>		2013-02-08 15:19:10 -05:00
..
auth_gss.c	SUNRPC set gss gc_expiry to full lifetime	2012-12-12 15:35:59 -05:00
gss_generic_token.c
gss_krb5_crypto.c	SUNRPC: Don't use variable length automatic arrays in kernel code	2012-03-12 13:37:16 -04:00
gss_krb5_keys.c
gss_krb5_mech.c	net: cleanup unsigned to unsigned int	2012-04-15 12:44:40 -04:00
gss_krb5_seal.c	SUNRPC: Fix a few sparse warnings	2012-03-11 19:30:02 -04:00
gss_krb5_seqnum.c
gss_krb5_unseal.c
gss_krb5_wrap.c	sunrpc: trim off trailing checksum before returning decrypted or integrity authenticated buffer	2013-02-08 15:19:10 -05:00
gss_mech_switch.c	SUNRPC: Add a missing spin_unlock to gss_mech_list_pseudoflavors	2012-07-17 17:02:57 -04:00
Makefile	Net: sunrpc: auth_gss: Makefile: Remove deprecated kbuild goal definitions	2010-11-22 08:16:16 -08:00
svcauth_gss.c	sunrpc: trim off trailing checksum before returning decrypted or integrity authenticated buffer	2013-02-08 15:19:10 -05:00