libceph: implement CEPHX_V2 calculation mode
authorIlya Dryomov <idryomov@gmail.com>
Fri, 27 Jul 2018 17:25:32 +0000 (19:25 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 5 Dec 2018 18:41:10 +0000 (19:41 +0100)
commitb16d0c5d32468a0624505a7b6b211e20488295e9
tree904178030a6104762750bbfd44ad5619fdb7fdc2
parent3fd73c8a71f299e30359a63add1f33e3fd834831
libceph: implement CEPHX_V2 calculation mode

commit cc255c76c70f7a87d97939621eae04b600d9f4a1 upstream.

Derive the signature from the entire buffer (both AES cipher blocks)
instead of using just the first half of the first block, leaving out
data_crc entirely.

This addresses CVE-2018-1129.

Link: http://tracker.ceph.com/issues/24837
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Sage Weil <sage@redhat.com>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/linux/ceph/ceph_features.h
net/ceph/auth_x.c