]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
authorStefan Metzmacher <metze@samba.org>
Thu, 11 Sep 2025 01:05:23 +0000 (10:05 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Sep 2025 08:58:52 +0000 (10:58 +0200)
commit196a3a7676d726ee67621ea2bf3b7815ac2685b4
treec038cb3dc8fe34750e9bd33b65b2ee19f73b7fda
parentbdaab5c6538e250a9654127e688ecbbeb6f771d5
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

commit e1868ba37fd27c6a68e31565402b154beaa65df0 upstream.

This is inspired by the check for data_offset + data_length.

Cc: Steve French <smfrench@gmail.com>
Cc: Tom Talpey <tom@talpey.com>
Cc: linux-cifs@vger.kernel.org
Cc: samba-technical@lists.samba.org
Cc: stable@vger.kernel.org
Fixes: 2ea086e35c3d ("ksmbd: add buffer validation for smb direct")
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/server/transport_rdma.c