| commit | cc255c76c70f7a87d97939621eae04b600d9f4a1 | [log] [tgz] |
|---|---|---|
| author | Ilya Dryomov <idryomov@gmail.com> | Fri Jul 27 19:25:32 2018 +0200 |
| committer | Ilya Dryomov <idryomov@gmail.com> | Thu Aug 02 21:33:25 2018 +0200 |
| tree | b090dc5237386d76ac1b44e204922ddce79f3428 | |
| parent | 6daca13d2e72bedaaacfc08f873114c9307d5aea [diff] |
libceph: implement CEPHX_V2 calculation mode Derive the signature from the entire buffer (both AES cipher blocks) instead of using just the first half of the first block, leaving out data_crc entirely. This addresses CVE-2018-1129. Link: http://tracker.ceph.com/issues/24837 Signed-off-by: Ilya Dryomov <idryomov@gmail.com> Reviewed-by: Sage Weil <sage@redhat.com>