]> git.itanic.dy.fi Git - linux-stable/commit
ksmbd: allocate one more byte for implied bcc[0]
authorChih-Yen Chang <cc85nod@gmail.com>
Fri, 5 May 2023 15:03:54 +0000 (00:03 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 24 May 2023 16:36:54 +0000 (17:36 +0100)
commit61e043326e72b5abb02b5bc9132f2620a7faf8c5
tree810418c160cfefd549df80a467759316ab5b399c
parent1c2461b41f302948708d9c5db970226d5d2e8474
ksmbd: allocate one more byte for implied bcc[0]

commit 443d61d1fa9faa60ef925513d83742902390100f upstream.

ksmbd_smb2_check_message allows client to return one byte more, so we
need to allocate additional memory in ksmbd_conn_handler_loop to avoid
out-of-bound access.

Cc: stable@vger.kernel.org
Signed-off-by: Chih-Yen Chang <cc85nod@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/connection.c