Eric Seppanen 6aec95b47d iscsi-target: chap auth shouldn't match username with trailing garbage ...

commit 86784c6bde upstream.

In iSCSI negotiations with initiator CHAP enabled, usernames with
trailing garbage are permitted, because the string comparison only
checks the strlen of the configured username.

e.g. "usernameXXXXX" will be permitted to match "username".

Just check one more byte so the trailing null char is also matched.

Signed-off-by: Eric Seppanen <eric@purestorage.com>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-12-04 10:56:15 -08:00

11 KiB

Raw Blame History

View Raw