]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ksmbd: validate zero num_subauth before sub_auth is accessed
authorNorbert Szetei <norbert@doyensec.com>
Sat, 29 Mar 2025 16:06:01 +0000 (16:06 +0000)
committerSteve French <stfrench@microsoft.com>
Tue, 1 Apr 2025 05:04:21 +0000 (00:04 -0500)
commitbf21e29d78cd2c2371023953d9c82dfef82ebb36
tree297eacb0736cb0149f90507f42abe5a5a2a6240d
parentbeff0bc9d69bc8e733f9bca28e2d3df5b3e10e42
ksmbd: validate zero num_subauth before sub_auth is accessed

Access psid->sub_auth[psid->num_subauth - 1] without checking
if num_subauth is non-zero leads to an out-of-bounds read.
This patch adds a validation step to ensure num_subauth != 0
before sub_auth is accessed.

Cc: stable@vger.kernel.org
Signed-off-by: Norbert Szetei <norbert@doyensec.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smbacl.c