Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-12401

Various issues with checksum calculation for Kerberos and SSK

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: Lustre 2.13.0
    • Fix Version/s: Lustre 2.13.0, Lustre 2.12.3
    • Labels:
    • Severity:
      3
    • Rank (Obsolete):
      9223372036854775807

      Description

      When computing checksum for Kerberos, krb5 wire token header is appended to the plain text. We need to make sure the actual header is appended in gss_digest_hash().

      In gss_crypt_generic(), it is better to protect against an undefined behavior by
      switching from memcpy to memmove.

        Attachments

          Activity

            People

            • Assignee:
              sebastien Sebastien Buisson
              Reporter:
              sebastien Sebastien Buisson
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: