Hi Linus-
The following changes since commit 6a8b55ed4056ea5559ebe4f6a4b247f627870d4c:
Linux 5.7-rc3 (2020-04-26 13:51:02 -0700)
are available in the Git repository at:
git://git.linux-nfs.org/projects/cel/cel-2.6.git tags/nfsd-5.7-rc-2
for you to fetch changes up to 0a8e7b7d08466b5fc52f8e96070acc116d82a8bb:
SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()") (2020-04-27 10:58:30 -0400)
----------------------------------------------------------------
Fixes:
- Resolve a data integrity problem with NFSD that I inadvertently
introduced last year. The change I made makes the NFS server's
duplicate reply cache ineffective when krb5i or krb5p are in use,
thus allowing the replay of non-idempotent NFS requests such as
RENAME, SETATTR, or even WRITEs.
----------------------------------------------------------------
Chuck Lever (3):
SUNRPC: Add "@len" parameter to gss_unwrap()
SUNRPC: Fix GSS privacy computation of auth->au_ralign
SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()")
include/linux/sunrpc/gss_api.h | 3 +++
include/linux/sunrpc/gss_krb5.h | 6 +++---
include/linux/sunrpc/xdr.h | 1 +
net/sunrpc/auth_gss/auth_gss.c | 12 +++++-------
net/sunrpc/auth_gss/gss_krb5_crypto.c | 8 ++++----
net/sunrpc/auth_gss/gss_krb5_wrap.c | 44 +++++++++++++++++++++++++++++---------------
net/sunrpc/auth_gss/gss_mech_switch.c | 3 ++-
net/sunrpc/auth_gss/svcauth_gss.c | 10 +++-------
net/sunrpc/xdr.c | 41 +++++++++++++++++++++++++++++++++++++++++
9 files changed, 91 insertions(+), 37 deletions(-)
--
Chuck Lever
