niansa-misc/linux
1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
Code Issues Projects Releases Packages Wiki Activity
linux/fs/smb/server
History
Namjae Jeon 79ed288cef ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() 
There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request
from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of
current smb2_ea_info. ksmbd need to validate buffer length Before
accessing the next ea. ksmbd should check buffer length using buf_len,
not next variable. next is the start offset of current ea that got from
previous ea.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21598
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
2023-08-05 20:57:00 -05:00
..
mgmt ksmbd: remove unused ksmbd_tree_conn_share function 2023-06-26 00:07:04 -05:00
asn1.c
asn1.h
auth.c
auth.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
connection.c ksmbd: validate smb request protocol id 2023-06-02 12:30:57 -05:00
connection.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
crypto_ctx.c
crypto_ctx.h
glob.h
Kconfig
ksmbd_netlink.h ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
ksmbd_spnego_negtokeninit.asn1
ksmbd_spnego_negtokentarg.asn1
ksmbd_work.c
ksmbd_work.h
Makefile
misc.c
misc.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
ndr.c smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
ndr.h
nterr.h
ntlmssp.h
oplock.c ksmbd: fix out-of-bound read in parse_lease_state() 2023-06-02 12:30:57 -05:00
oplock.h
server.c ksmbd: fix out of bounds in init_smb2_rsp_hdr() 2023-07-23 10:25:11 -05:00
server.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
smb2misc.c ksmbd: validate command request size 2023-08-05 20:56:54 -05:00
smb2ops.c smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
smb2pdu.c ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() 2023-08-05 20:57:00 -05:00
smb2pdu.h
smb_common.c ksmbd: fix out of bounds in init_smb2_rsp_hdr() 2023-07-23 10:25:11 -05:00
smb_common.h ksmbd: fix out of bounds in init_smb2_rsp_hdr() 2023-07-23 10:25:11 -05:00
smbacl.c ksmbd: Replace the ternary conditional operator with min() 2023-06-26 00:07:04 -05:00
smbacl.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
smbfsctl.h cifs: correct references in Documentation to old fs/cifs path 2023-05-24 16:29:21 -05:00
smbstatus.h cifs: correct references in Documentation to old fs/cifs path 2023-05-24 16:29:21 -05:00
transport_ipc.c ksmbd: use kvzalloc instead of kvmalloc 2023-06-26 00:07:04 -05:00
transport_ipc.h
transport_rdma.c
transport_rdma.h
transport_tcp.c
transport_tcp.h
unicode.c
unicode.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
uniupr.h
vfs.c ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
vfs.h ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
vfs_cache.c ksmbd: add mnt_want_write to ksmbd vfs functions 2023-06-16 21:04:19 -05:00
vfs_cache.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
xattr.h smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00