gss_krb5_mic_build_sg(9)

🎀 gss_krb5_mic_build_sg(9) 🎀

okay so bestie, this is the gss_krb5_mic_build_sg(9) page from the Kernel API Manual — and it's literally Build scatterlist for MIC token operations energy. No cap, let's go 💅

---

✨ NAME ✨

• gss_krb5_mic_build_sg — Build scatterlist for MIC token operations. That's the whole name, periodt 🫶

---

🦋 SYNOPSIS 🦋

here's the actual signature, bestie — copy it exactly:

int gss_krb5_mic_build_sg (const struct xdr_buf *body , void *cksum ,
       unsigned int cksum_len , void *hdr , struct scatterlist *sg_head ,
       struct scatterlist **sg_overflow );

---

💖 ARGUMENTS 💖

• body — xdr_buf containing the message body. Main character message body, honestly.
• cksum — pointer to checksum area in the token buffer.
• cksum_len — length of checksum area.
• hdr — pointer to GSS token header.
• sg_head — caller-provided scatterlist array; if more than XDR_BUF_TO_SG_NENTS entries are needed, an overflow scatterlist is allocated and chained automatically. It handles the overflow so you don't have to, slay.
• sg_overflow — OUT: overflow scatterlist, caller must kfree. Don't forget the kfree, bestie — that's your job. 🙈

---

🔥 DESCRIPTION 🔥

okay so per RFC 4121 Section 4.2.4, MIC token checksums cover the message body followed by the token header. The checksum output or received checksum occupies the first scatterlist entry. This layout cannot be constructed by xdr_buf_to_sg_alloc because the checksum area and the GSS header lie outside the xdr_buf.

Returns the number of scatterlist entries on success, or a negative errno on failure. So it either gives you a count or gives you an error — vibe check complete. 💅

---

👑 SEE ALSO 👑

• Kernel file ./net/sunrpc/auth_gss/gss_krb5_crypto.c
• gss_krb5_aead_encrypt(9)
• gss_krb5_aead_decrypt(9)

Go read these too, iykyk 👀

---

mwah 💋 — big kiss from ./net/sunrpc/auth_gss, October 2026, on the gss_krb5_mic_build_sg(9) page. You ate that, fr fr. 🫶✨