Re: Possible bug in NFSv4 with krb5p security?

看板FB_current作者時間12年前 (2013/04/27 13:32), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串15/33 (看更多)
QmVuamFtaW4gS2FkdWsgd3JvdGU6Cj4gT24gU2F0LCAxNiBGZWIgMjAxMywgRWxpYXMgTcOlcnRl bnNvbiB3cm90ZToKPiAKPiA+Cj4gPiBUaGFuayB5b3UuIEkgZGlkIGV4YWN0bHkgdGhhdCBhbmQg SSBmb3VuZCBvdXQgc29tZSBtb3JlLgo+ID4KPiA+IFRoZSBwcm9ibGVtIG9jY3Vyc3MgaW4gZmls ZSBnc3MuYywgaW4gdGhlCj4gPiBmdW5jdGlvbiBnc3NkX3BuYW1lX3RvX3VpZF8xX3N2YygpLiBU aGlzIGZ1bmN0aW9uIGlzIHJlc3BvbnNpYmxlIGZvcgo+ID4gdGFraW5nCj4gPiBhIHByaW5jaXBh bCBhbmQgcmV0dXJuaW5nIHRoZSBVbml4IHVzZXIgSUQgdGhhdCB0aGlzIHByaW5jaXBhbAo+ID4g Y29ycmVzcG9uZHMKPiA+IHRvLiBJIGRpZCBjb25maXJtIHRoYXQgdGhpcyBmdW5jdGlvbiBpcyBj YWxsZWQgd2l0aCBlbGlhc0BSRUFMTSwKPiA+IHdoaWNoIGlzCj4gPiB0aGUgY29ycmVjdCBwcmlu Y2lwYWwuIEl0IHRoZW4gY2FsbHMgdGhlIGxpYmdzc2FwaSBmdW5jdGlvbgo+ID4gZ3NzX3BuYW1l X3RvX3VpZCgpIHdoaWNoIGRvZXMgdGhlIGFjdHVhbCBsb29rdXAuCj4gPgo+ID4gVGhlIHByb2Js ZW0gaXMgdGhhdCBhZnRlciB0aGUgbG9va3VwICh3aGljaCBzdWNjZWVkcyBieSB0aGUgd2F5KSwg aXQKPiA+IHJldHVybnMgdXNlciBJRCAwIChpLmUuIHJvb3QsIHdoYXQhPykuIE9mIGNvdXJzZSwg dGhpcyB1aWQgbGF0ZXIKPiA+IGdldHMKPiA+IG1hcHBlZCB0byBub2JvZHksIHJlc3VsdGluZyBp biB0aGUgYmVoYXZpb3VyIHRoYXQgSSBzZWUuCj4gPgo+ID4gSSB0cmllZCB0byBhZGQgbW9yZSBk ZWJ1Z2dpbmcgaW5mb3JtYXRpb24gaW4gbGliZ3NzYXBpLnNvLjEwLCBidXQgaWYKPiA+IEkganVz dAo+ID4gdHJ5IHRvIGFkZCBzb21lIHByaW50ZigpIHN0YXRlbWVudHMsIHRoZSBlbnRpcmUgdGhp bmcgaGFuZ3MuIEknbSBub3QKPiA+IHN1cmUKPiA+IGhvdyB0byBwcm9jZWVkIGZyb20gdGhlcmUu Cj4gPgo+ID4gT2gsIGFuZCB0aGUgbGliZ3NzYXBpIGZ1bmN0aW9uIGdzc19wbmFtZV90b191aWQo KSBhY3R1YWxseSBkZWxlZ2F0ZXMKPiA+IHRoZQo+ID4gYWN0dWFsIGxvb2t1cCB0byBhIGZ1bmN0 aW9uIHRoYXQgZGVwZW5kcyBvbiB3aGF0IHNlY3VyaXR5IG1lY2hhbmlzbQo+ID4gaXMgaW4KPiA+ IHBsYWNlLiBNeSBwcmludGYoKSdzICh0aGF0IGNhdXNlZCB0aGUgaGFuZykgYXR0ZW1wdGVkIHRv IHByaW50IHdoYXQKPiA+IG1lY2hhbmlzbSB3YXMgYWN0dWFsbHkgdXNlZC4KPiAKPiBVbmxlc3Mg dGhpbmdzIGFyZSB2ZXJ5IG1lc3NlZCB1cCwgaXQgc2hvdWxkIGJlIHVzaW5nIHRoZSBrcmI1Cj4g bWVjaGFuaXNtLAo+IHdoaWNoIEkgYmVsaWV2ZSB3aWxsIGJvaWwgZG93biB0byBrcmI1X2FuYW1l X3RvX2xvY2FsbmFtZSwgcGVyCj4gaGVpbWRhbC9saWIvZ3NzYXBpL2tyYjUvcG5hbWVfdG9fdWlk LmMuIEknbSBub3Qgc3VyZSBob3cgdGhpcyB3b3VsZAo+IGVuZAo+IHVwIHdpdGggc3VjY2VzcyBi dXQgdWlkIDAsIHRob3VnaC4KPiBEbyB5b3UgaGF2ZSB0aGUgZGVmYXVsdCByZWFsbSBzZXQgaW4g a3JiNS5jb25mPyBIYXZpbmcgaXQgc2V0IHRvIGEKPiBkaWZmZXJlbnQgdmFsdWUgdGhhbiB0aGUg cmVhbG0gb2YgZWxpYXNAUkVBTE0gY291bGQgcmVzdWx0IGluIHN0cmFuZ2UKPiBiZWhhdmlvci4K PiAKPiA+IEFuZCB5ZXQgb25lIG1vcmUgdGhpbmc6IEhlaW1kYWwgc2hpcHMgd2l0aCBpdHMgb3du IHZlcnNpb24gb2YKPiA+IGxpYmdzc2FwaS4gSQo+ID4gY2FuIGxpbmsgZ3NzZCB0byBpdCwgYnV0 IGl0IHdvbid0IHJ1biBwcm9wZXJseSAoaXQgaGFuZ3MgcHJldHR5Cj4gPiBlYXJseSkuCj4gCj4g SSBoYXZlIGZvcmdvdHRlbjogeW91IGFyZSB1c2luZyBIZWltZGFsIGZyb20gcG9ydHMsIG5vdCBm cm9tIHRoZSBiYXNlCj4gc3lzdGVtPyBJIHJlbWVtYmVyIGl0IGJlaW5nIGVhc3kgdG8gZ2V0IGlu dG8gc3VidGx5LWJyb2tlbgo+IGNvbmZpZ3VyYXRpb25zCj4gd2hlbiBib3RoIGEgcG9ydHMgYW5k IGEgYmFzZSB2ZXJzaW9uIGFyZSBwcmVzZW50Lgo+IAo+IC1CZW4gS2FkdWsKV2VsbCwgaGVyZSdz IHRoZSBhbmFtZV90b19sb2NhbG5hbWUgZnVuY3Rpb24gc291cmNlcy4gQWZ0ZXIgdGhpcywgaXQg anVzdApjYWxscyBnZXRwd25hbV9yKCkgdG8gZ2V0IHRoZSBwYXNzd29yZCBkYXRhYmFzZSBlbnRy eSBmb3IgdGhlIG5hbWUuCkkndmUgcHV0ICIqKioiIGluIGZyb250IG9mIHdoYXQgSSBzdXNwZWN0 IGlzIGNhdXNpbmcgeW91ciBwcm9ibGVtLgpJIGhhdmUgbm8gaWRlYSB3aGVuIHRoZXJlIGlzIGEg bmFtZV9zdHJpbmcubGVuID09IDIgd2l0aCAicm9vdCIgYXMgdGhlCnNlY29uZCBzdHJpbmcuIE1h eWJlIEJlbmphbWluIGtub3dzPwoKa3JiNV9lcnJvcl9jb2RlIEtSQjVfTElCX0ZVTkNUSU9OCmty YjVfYW5hbWVfdG9fbG9jYWxuYW1lIChrcmI1X2NvbnRleHQgY29udGV4dCwKCQkJIGtyYjVfY29u c3RfcHJpbmNpcGFsIGFuYW1lLAoJCQkgc2l6ZV90IGxuc2l6ZSwKCQkJIGNoYXIgKmxuYW1lKQp7 CiAgICBrcmI1X2Vycm9yX2NvZGUgcmV0OwogICAga3JiNV9yZWFsbSAqbHJlYWxtcywgKnI7CiAg ICBpbnQgdmFsaWQ7CiAgICBzaXplX3QgbGVuOwogICAgY29uc3QgY2hhciAqcmVzOwoKICAgIHJl dCA9IGtyYjVfZ2V0X2RlZmF1bHRfcmVhbG1zIChjb250ZXh0LCAmbHJlYWxtcyk7CiAgICBpZiAo cmV0KQoJcmV0dXJuIHJldDsKCiAgICB2YWxpZCA9IDA7CiAgICBmb3IgKHIgPSBscmVhbG1zOyAq ciAhPSBOVUxMOyArK3IpIHsKCWlmIChzdHJjbXAgKCpyLCBhbmFtZS0+cmVhbG0pID09IDApIHsK CSAgICB2YWxpZCA9IDE7CgkgICAgYnJlYWs7Cgl9CiAgICB9CiAgICBrcmI1X2ZyZWVfaG9zdF9y ZWFsbSAoY29udGV4dCwgbHJlYWxtcyk7CiAgICBpZiAodmFsaWQgPT0gMCkKCXJldHVybiBLUkI1 X05PX0xPQ0FMTkFNRTsKCiAgICBpZiAoYW5hbWUtPm5hbWUubmFtZV9zdHJpbmcubGVuID09IDEp CglyZXMgPSBhbmFtZS0+bmFtZS5uYW1lX3N0cmluZy52YWxbMF07CioqKiBlbHNlIGlmIChhbmFt ZS0+bmFtZS5uYW1lX3N0cmluZy5sZW4gPT0gMgoJICAgICAmJiBzdHJjbXAgKGFuYW1lLT5uYW1l Lm5hbWVfc3RyaW5nLnZhbFsxXSwgInJvb3QiKSA9PSAwKSB7CglrcmI1X3ByaW5jaXBhbCByb290 cHJpbmM7CglrcmI1X2Jvb2xlYW4gdXNlcm9rOwoKCXJlcyA9ICJyb290IjsKCglyZXQgPSBrcmI1 X2NvcHlfcHJpbmNpcGFsKGNvbnRleHQsIGFuYW1lLCAmcm9vdHByaW5jKTsKCWlmIChyZXQpCgkg ICAgcmV0dXJuIHJldDsKCQoJdXNlcm9rID0ga3JiNV9rdXNlcm9rKGNvbnRleHQsIHJvb3Rwcmlu YywgcmVzKTsKCWtyYjVfZnJlZV9wcmluY2lwYWwoY29udGV4dCwgcm9vdHByaW5jKTsKCWlmICgh dXNlcm9rKQoJICAgIHJldHVybiBLUkI1X05PX0xPQ0FMTkFNRTsKCiAgICB9IGVsc2UKCXJldHVy biBLUkI1X05PX0xPQ0FMTkFNRTsKCiAgICBsZW4gPSBzdHJsZW4gKHJlcyk7CiAgICBpZiAobGVu ID49IGxuc2l6ZSkKCXJldHVybiBFUkFOR0U7CiAgICBzdHJsY3B5IChsbmFtZSwgcmVzLCBsbnNp emUpOwoKICAgIHJldHVybiAwOwp9CgpJJ3ZlIG5ldmVyIHNlZW4gS2VyYmVyb3MgbWFwIHRvICJy b290IiBsaWtlIHRoZSBhYm92ZSB3b3VsZCBmb3IKbmFtZS5uYW1lX3N0cmluZy5sZW4gPT0gMiwg YnV0IEknbSBndWVzc2luZyB0aGF0J3MgaG93IHlvdSBnZXQKdWlkID09IDAuCgpyaWNrCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmZyZWVic2QtY3VycmVu dEBmcmVlYnNkLm9yZyBtYWlsaW5nIGxpc3QKaHR0cDovL2xpc3RzLmZyZWVic2Qub3JnL21haWxt YW4vbGlzdGluZm8vZnJlZWJzZC1jdXJyZW50ClRvIHVuc3Vic2NyaWJlLCBzZW5kIGFueSBtYWls IHRvICJmcmVlYnNkLWN1cnJlbnQtdW5zdWJzY3JpYmVAZnJlZWJzZC5vcmci
文章代碼(AID): #1HUsBP7K (FB_current)
討論串 (同標題文章)
文章代碼(AID): #1HUsBP7K (FB_current)