md5 is disabled in fips mode, and attempting to import a gss context using md5 while in fips mode will result in crypto_alg_mod_lookup() returning -ENOENT, which will make its way back up to gss_pipe_downcall(), where the BUG() is triggered. Handling the -ENOENT allows for a more graceful failure. Signed-off-by: Scott Mayhew <smayhew@xxxxxxxxxx> --- net/sunrpc/auth_gss/auth_gss.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/sunrpc/auth_gss/auth_gss.c b/net/sunrpc/auth_gss/auth_gss.c index 799e65b..c30fc3b 100644 --- a/net/sunrpc/auth_gss/auth_gss.c +++ b/net/sunrpc/auth_gss/auth_gss.c @@ -737,6 +737,9 @@ gss_pipe_downcall(struct file *filp, const char __user *src, size_t mlen) case -ENOSYS: gss_msg->msg.errno = -EAGAIN; break; + case -ENOENT: + gss_msg->msg.errno = -EPROTONOSUPPORT; + break; default: printk(KERN_CRIT "%s: bad return from " "gss_fill_context: %zd\n", __func__, err); -- 2.4.3 -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
