]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
cifs: prevent NULL pointer dereference in UTF16 conversion
authorMakar Semyonov <m.semenov@tssltd.ru>
Thu, 4 Sep 2025 12:28:41 +0000 (15:28 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 9 Sep 2025 16:54:18 +0000 (18:54 +0200)
commit65b98a7e65e7a8f3894d8760cd194eaf20504c99
tree01f357c2ad37f35f2f0de94bca9718ee960b915b
parentdce6c2aa70e94c04c523b375dfcc664d7a0a560a
cifs: prevent NULL pointer dereference in UTF16 conversion

commit 70bccd9855dae56942f2b18a08ba137bb54093a0 upstream.

There can be a NULL pointer dereference bug here. NULL is passed to
__cifs_sfu_make_node without checks, which passes it unchecked to
cifs_strndup_to_utf16, which in turn passes it to
cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash.

This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and
returns NULL early to prevent dereferencing NULL pointer.

Found by Linux Verification Center (linuxtesting.org) with SVACE

Signed-off-by: Makar Semyonov <m.semenov@tssltd.ru>
Cc: stable@vger.kernel.org
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/client/cifs_unicode.c