ksmbd: validate credit charge after validating SMB2 PDU body size
mainline inclusion from mainline-5.15-rc7 commit 7a334887 category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/I60T7G CVE: NA Reference: https://git.kernel.org/torvalds/linux/c/7a3348870500 ------------------------------- smb2_validate_credit_charge() accesses fields in the SMB2 PDU body, but until smb2_calc_size() is called the PDU has not yet been verified to be large enough to access the PDU dynamic part length field. Acked-by:Namjae Jeon <linkinjeon@kernel.org> Signed-off-by:
Ralph Boehme <slow@samba.org> Signed-off-by:
Steve French <stfrench@microsoft.com> Signed-off-by:
Jason Yan <yanaijie@huawei.com> Signed-off-by:
Zhong Jinghua <zhongjinghua@huawei.com>
Loading
Please sign in to comment