[LU-12401] Various issues with checksum calculation for Kerberos and SSK

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.13.0, Lustre 2.12.3
• Affects Version/s: Lustre 2.13.0
• Labels: gss
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

When computing checksum for Kerberos, krb5 wire token header is appended to the plain text. We need to make sure the actual header is appended in gss_digest_hash().

In gss_crypt_generic(), it is better to protect against an undefined behavior by
switching from memcpy to memmove.