]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix potencial out-of-bounds when buffer offset is invalid
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 18 Mar 2024 23:40:48 +0000 (08:40 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Apr 2024 13:11:29 +0000 (15:11 +0200)
commit2dcda336b6e80b72d58d30d40f2fad9724e5fe63
tree151a146a441c77f69d75b96f58220588e0accc5e
parent95d040b653373f1d94c75051e2b2dd61ae1ee54e
ksmbd: fix potencial out-of-bounds when buffer offset is invalid

[ Upstream commit c6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753da ]

I found potencial out-of-bounds when buffer offset fields of a few requests
is invalid. This patch set the minimum value of buffer offset field to
->Buffer offset to validate buffer length.

Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/smb/server/smb2misc.c
fs/smb/server/smb2pdu.c