Commit dbad6300 authored by Namjae Jeon's avatar Namjae Jeon Committed by Steve French
Browse files

ksmbd: validate compound response buffer 



Add the check to validate compound response buffer.

Signed-off-by: default avatarNamjae Jeon <linkinjeon@kernel.org>
Signed-off-by: default avatarSteve French <stfrench@microsoft.com>
parent 9a63b999

fs/ksmbd/smb2pdu.c

+6 −0
Original line number Diff line number Diff line
@@ -449,6 +449,12 @@ bool is_chained_smb2_message(struct ksmbd_work *work) 
			return false;

		}



		if ((u64)get_rfc1002_len(work->response_buf) + MAX_CIFS_SMALL_BUFFER_SIZE >

		    work->response_sz) {

			pr_err("next response offset exceeds response buffer size\n");

			return false;

		}



		ksmbd_debug(SMB, "got SMB2 chained command\n");

		init_chained_smb2_rsp(work);

		return true;