bug in rpc code

2000-10-12 Thread Hai-Pao Fan
Problem: A returned address from kmalloc() can be overwritten to a wrong place in rpcauth_lookup_credcache() routine. rpcauth_lookup_credcache(struct rpc_auth *auth, int taskflags) { ... if (!cred) { cred = auth->au_ops->crcreate(taskflags); } if (cred)

bug in rpc code

2000-10-12 Thread Hai-Pao Fan
Problem: A returned address from kmalloc() can be overwritten to a wrong place in rpcauth_lookup_credcache() routine. rpcauth_lookup_credcache(struct rpc_auth *auth, int taskflags) { ... if (!cred) { cred = auth-au_ops-crcreate(taskflags); } if (cred)