Unverified Commit 514ecce4 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9092 v2 ksmbd: validate request buffer size in smb2_allocate_rsp_buf() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Long Li <leo.lilong@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/HZDJFPOKK4ICVI2N3UCTONA7J7FVSLQY/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9L4XI 
 
Link:https://gitee.com/openeuler/kernel/pulls/9092

 

Reviewed-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents d5bf23ac 2d435efc

fs/ksmbd/smb2pdu.c

+4 −0
Original line number Diff line number Diff line
@@ -539,6 +539,10 @@ int smb2_allocate_rsp_buf(struct ksmbd_work *work) 
	if (cmd == SMB2_QUERY_INFO_HE) {

		struct smb2_query_info_req *req;



		if (get_rfc1002_len(work->request_buf) <

			offsetof(struct smb2_query_info_req, OutputBufferLength))

			return -EINVAL;



		req = smb2_get_msg(work->request_buf);

		if ((req->InfoType == SMB2_O_INFO_FILE &&

		     (req->FileInfoClass == FILE_FULL_EA_INFORMATION ||