]> git.itanic.dy.fi Git - linux-stable/commit
ksmbd: allocate one more byte for implied bcc[0]
authorChih-Yen Chang <cc85nod@gmail.com>
Fri, 5 May 2023 15:03:54 +0000 (00:03 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 24 May 2023 16:30:21 +0000 (17:30 +0100)
commit778aae5a513ea09aa5addfa352bd70a5b71dda85
tree904d197ef1b43a858c74a9442266af35164389d4
parent69e576f03e2e4c41402d1673a96b0cdad25240e2
ksmbd: allocate one more byte for implied bcc[0]

commit 443d61d1fa9faa60ef925513d83742902390100f upstream.

ksmbd_smb2_check_message allows client to return one byte more, so we
need to allocate additional memory in ksmbd_conn_handler_loop to avoid
out-of-bound access.

Cc: stable@vger.kernel.org
Signed-off-by: Chih-Yen Chang <cc85nod@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/connection.c