]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
authorJordy Zomer <jordyzomer@google.com>
Thu, 28 Nov 2024 00:33:25 +0000 (09:33 +0900)
committerSteve French <stfrench@microsoft.com>
Sun, 1 Dec 2024 23:31:19 +0000 (17:31 -0600)
commit313dab082289e460391c82d855430ec8a28ddf81
treec55ea9c544c2ce7d79d45a7fa183e0c1d4d963c3
parentfc342cf86e2dc4d2edb0fc2ff5e28b6c7845adb9
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write

An offset from client could be a negative value, It could allows
to write data outside the bounds of the allocated buffer.
Note that this issue is coming when setting
'vfs objects = streams_xattr parameter' in ksmbd.conf.

Cc: stable@vger.kernel.org # v5.15+
Reported-by: Jordy Zomer <jordyzomer@google.com>
Signed-off-by: Jordy Zomer <jordyzomer@google.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2pdu.c