]> git.ipfire.org Git - thirdparty/linux.git/commit
ksmbd: fix buffer validation by including null terminator size in EA length
authorNamjae Jeon <linkinjeon@kernel.org>
Sun, 14 Dec 2025 06:06:34 +0000 (15:06 +0900)
committerSteve French <stfrench@microsoft.com>
Mon, 15 Dec 2025 00:35:56 +0000 (18:35 -0600)
commit95d7a890e4b03e198836d49d699408fd1867cb55
treeb932eda763e22d13b9f497438bee32ea5059ee09
parentcafb57f7bdd57abba87725eb4e82bbdca4959644
ksmbd: fix buffer validation by including null terminator size in EA length

The smb2_set_ea function, which handles Extended Attributes (EA),
was performing buffer validation checks that incorrectly omitted the size
of the null terminating character (+1 byte) for EA Name.
This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where
the null terminator is expected to be present in the buffer, ensuring
the validation accurately reflects the total required buffer size.

Cc: stable@vger.kernel.org
Reported-by: Roger <roger.andersen@protonmail.com>
Reported-by: Stanislas Polu <spolu@dust.tt>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2pdu.c