]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
cifs: Fix integer overflow while processing closetimeo mount option
authorMurad Masimov <m.masimov@mt-integration.ru>
Tue, 11 Mar 2025 14:22:06 +0000 (17:22 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Apr 2025 12:31:53 +0000 (14:31 +0200)
commit513f6cf2e906a504b7ab0b62b2eea993a6f64558
tree37ed9d927761c371c017c265afb62aca371ec2c4
parentea8e5dd4e4cd27ccf7cb49c0db704f5b5753964b
cifs: Fix integer overflow while processing closetimeo mount option

[ Upstream commit d5a30fddfe2f2e540f6c43b59cf701809995faef ]

User-provided mount parameter closetimeo of type u32 is intended to have
an upper limit, but before it is validated, the value is converted from
seconds to jiffies which can lead to an integer overflow.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 5efdd9122eff ("smb3: allow deferred close timeout to be configurable")
Signed-off-by: Murad Masimov <m.masimov@mt-integration.ru>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/cifs/fs_context.c