Commit b096d97f authored by Namjae Jeon's avatar Namjae Jeon Committed by Steve French
Browse files

ksmbd: block asynchronous requests when making a delay on session setup 



ksmbd make a delay of 5 seconds on session setup to avoid dictionary
attacks. But the 5 seconds delay can be bypassed by using asynchronous
requests. This patch block all requests on current connection when
making a delay on sesstion setup failure.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20482
Signed-off-by: default avatarNamjae Jeon <linkinjeon@kernel.org>
Signed-off-by: default avatarSteve French <stfrench@microsoft.com>
parent ea174a91

fs/ksmbd/smb2pdu.c

+4 −1
Original line number Diff line number Diff line
@@ -1840,8 +1840,11 @@ int smb2_sess_setup(struct ksmbd_work *work) 


			sess->last_active = jiffies;

			sess->state = SMB2_SESSION_EXPIRED;

			if (try_delay)

			if (try_delay) {

				ksmbd_conn_set_need_reconnect(conn);

				ssleep(5);

				ksmbd_conn_set_need_negotiate(conn);

			}

		}

	}