ziming zhang 7fce830ecd libceph: prevent potential out-of-bounds writes in handle_auth_session_key() ...

The len field originates from untrusted network packets. Boundary
checks have been added to prevent potential out-of-bounds writes when
decrypting the connection secret or processing service tickets.

[ idryomov: changelog ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

2025-11-27 09:59:49 +01:00

..

crush

…

armor.c

…

auth_none.c

…

auth_none.h

…

auth_x_protocol.h

…

auth_x.c

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-11-27 09:59:49 +01:00

auth_x.h

…

auth.c

…

buffer.c

…

ceph_common.c

…

ceph_hash.c

…

ceph_strings.c

…

cls_lock_client.c

…

crypto.c

…

crypto.h

…

debugfs.c

…

decode.c

…

Kconfig

…

Makefile

…

messenger_v1.c

…

messenger_v2.c

ceph: fix crash in process_v2_sparse_read() for encrypted directories

2025-11-27 09:59:34 +01:00

messenger.c

…

mon_client.c

…

msgpool.c

…

osd_client.c

…

osdmap.c

libceph: replace BUG_ON with bounds check for map->max_osd

2025-11-27 09:59:42 +01:00

pagelist.c

…

pagevec.c

…

snapshot.c

…

string_table.c

…

striper.c

…