]> git.itanic.dy.fi Git - linux-stable/commit
ksmbd: allocate one more byte for implied bcc[0]
authorChih-Yen Chang <cc85nod@gmail.com>
Fri, 5 May 2023 15:03:54 +0000 (00:03 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 24 May 2023 16:32:50 +0000 (17:32 +0100)
commitaf7335a4b946f9f6f9d98398cbcea15cd9850409
tree18ba7043e4c08ace15de4001294bc45feb19973d
parentf1d013b0f0f07264229b54ae64003315837a0fcd
ksmbd: allocate one more byte for implied bcc[0]

commit 443d61d1fa9faa60ef925513d83742902390100f upstream.

ksmbd_smb2_check_message allows client to return one byte more, so we
need to allocate additional memory in ksmbd_conn_handler_loop to avoid
out-of-bound access.

Cc: stable@vger.kernel.org
Signed-off-by: Chih-Yen Chang <cc85nod@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/connection.c