linux/fs/smb
Dan Carpenter b4b9027377 ksmbd: fix integer overflows on 32 bit systems
commit aab98e2dbd upstream.

On 32bit systems the addition operations in ipc_msg_alloc() can
potentially overflow leading to memory corruption.
Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

Fixes: 0626e6641f ("cifsd: add server handler for central processing and tranport layers")
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-02-17 10:05:06 +01:00
..
client smb: client: change lease epoch type from unsigned int to __u16 2025-02-17 10:05:03 +01:00
common smb: Update comments about some reparse point tags 2024-09-29 17:28:40 -05:00
server ksmbd: fix integer overflows on 32 bit systems 2025-02-17 10:05:06 +01:00
Kconfig smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
Makefile smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00