Project

General

Profile

Actions

Bug #8109

closed

Kernel AUTH_SYS and AUTH_LOOPBACK implementation can ignore provided credentials

Added by Marcel Telka about 5 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
kernel
Start date:
2017-04-26
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

Both authloopback_marshal() and authkern_marshal() will ignore the passed in credentials in a case the provided XDR have not preallocated large enough buffer, or it is non-trivial (like xdrmblk with several linked mblks); IOW, when the XDR_INLINE() call in the marshalling functions fails.


Related issues

Related to illumos gate - Bug #8106: authloopback_marshal() can violate the RPC specificationClosedMarcel Telka2017-04-25

Actions
Actions

Also available in: Atom PDF