]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix out of bounds in smb3_decrypt_req()
authorNamjae Jeon <linkinjeon@kernel.org>
Fri, 21 Jul 2023 15:09:28 +0000 (00:09 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 19 Sep 2023 10:22:27 +0000 (12:22 +0200)
commit82373d1b763e4f5143ea7064bfdef8ef552ad152
tree39391e9bbab46f4a8042e3ccdaf13936b4dcb4f0
parent20d449a08749dba25a63538be5206d3467e4e6e2
ksmbd: fix out of bounds in smb3_decrypt_req()

[ Upstream commit dc318846f3dd54574a36ae97fc8d8b75dd7cdb1e ]

smb3_decrypt_req() validate if pdu_length is smaller than
smb2_transform_hdr size.

Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21589
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/ksmbd/smb2pdu.c