CIFS: Fix null pointer deref during read resp processing

Browse source

Currently during receiving a read response mid->resp_buf can be
NULL when it is being passed to cifs_discard_remaining_data() from
cifs_readv_discard(). Fix it by always passing server->smallbuf
instead and initializing mid->resp_buf at the end of read response
processing.

Signed-off-by: Pavel Shilovsky <pshilov@microsoft.com>
CC: Stable <stable@vger.kernel.org>
Acked-by: Sachin Prabhu <sprabhu@redhat.com>
Signed-off-by: Steve French <smfrench@gmail.com>

...

This commit is contained in:

Pavel Shilovsky 2017-04-10 10:31:33 -07:00 • committed by Steve French

parent c08e611b7d

commit 350be257ea

3 changed files with 11 additions and 11 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

fs/cifs/cifsproto.h

View file

15

fs/cifs/cifssmb.c

View file

4

fs/cifs/smb2ops.c

View file