projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6daca13) | patch
libceph: implement CEPHX_V2 calculation mode
authorIlya Dryomov <idryomov@gmail.com>
Fri, 27 Jul 2018 17:25:32 +0000 (19:25 +0200)
committerIlya Dryomov <idryomov@gmail.com>
Thu, 2 Aug 2018 19:33:25 +0000 (21:33 +0200)
commitcc255c76c70f7a87d97939621eae04b600d9f4a1
treeb090dc5237386d76ac1b44e204922ddce79f3428tree | snapshot
parent6daca13d2e72bedaaacfc08f873114c9307d5aeacommit | diff
libceph: implement CEPHX_V2 calculation mode

Derive the signature from the entire buffer (both AES cipher blocks)
instead of using just the first half of the first block, leaving out
data_crc entirely.

This addresses CVE-2018-1129.

Link: http://tracker.ceph.com/issues/24837
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Sage Weil <sage@redhat.com>
include/linux/ceph/ceph_features.h diff | blob | history
net/ceph/auth_x.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git