]> www.infradead.org Git - nvme.git/commit
projects / nvme.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 40b268d) | patch
ksmbd: fix out-of-bound read in smb2_write
authorNamjae Jeon <linkinjeon@kernel.org>
Thu, 15 Jun 2023 13:04:40 +0000 (22:04 +0900)
committerSteve French <stfrench@microsoft.com>
Sat, 17 Jun 2023 02:04:36 +0000 (21:04 -0500)
commit5fe7f7b78290638806211046a99f031ff26164e1
tree47dc31e0037b34c27a703f4ab185475cf123006dtree
parent40b268d384a22276dca1450549f53eed60e21debcommit | diff
ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If
->NextCommand is bigger than Offset + Length of smb2 write, It will
allow oversized smb2 write length. It will cause OOB read in smb2_write.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21164
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2misc.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.