ksmbd: fix potencial out-of-bounds when buffer offset is invalid

Browse source

[ Upstream commit c6cd2e8d2d ]

I found potencial out-of-bounds when buffer offset fields of a few requests
is invalid. This patch set the minimum value of buffer offset field to
->Buffer offset to validate buffer length.

Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Namjae Jeon 2024-03-19 08:40:48 +09:00 • committed by Greg Kroah-Hartman

parent 9e4937cbc1

commit 39bdc4197a

2 changed files with 42 additions and 29 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

23

fs/smb/server/smb2misc.c

View file

48

fs/smb/server/smb2pdu.c

View file