mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-01-07 13:53:24 +00:00
SUNRPC: Obscure Kerberos session key
ctx->Ksess is never used after import has completed. Obscure it immediately so it cannot be re-used or copied. Tested-by: Scott Mayhew <smayhew@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
This commit is contained in:
parent
7f675ca775
commit
01c4e32632
@ -550,6 +550,7 @@ gss_import_sec_context_kerberos(const void *p, size_t len,
|
||||
ret = gss_import_v1_context(p, end, ctx);
|
||||
else
|
||||
ret = gss_import_v2_context(p, end, ctx, gfp_mask);
|
||||
memzero_explicit(&ctx->Ksess, sizeof(ctx->Ksess));
|
||||
if (ret) {
|
||||
kfree(ctx);
|
||||
return ret;
|
||||
|
Loading…
Reference in New Issue
Block a user