Unverified Commit dd1b2b2e authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!5747 ksmbd: fix global oob in ksmbd_nl_policy 

Merge Pull Request from: @ci-robot 
 
PR sync from: ZhaoLong Wang <wangzhaolong1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/UATRCOTTVCFSYBKQIAJS3YCYH73PFASU/ 
 
https://gitee.com/src-openeuler/kernel/issues/I97NHT 
 
Link:https://gitee.com/openeuler/kernel/pulls/5747

 

Reviewed-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 674525d7 71c29033

fs/ksmbd/ksmbd_netlink.h

+2 −1
Original line number Diff line number Diff line
@@ -300,7 +300,8 @@ enum ksmbd_event { 
	KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST,

	KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE	= 15,



	KSMBD_EVENT_MAX

	__KSMBD_EVENT_MAX,

	KSMBD_EVENT_MAX = __KSMBD_EVENT_MAX - 1

};



/*

fs/ksmbd/transport_ipc.c

+2 −2
Original line number Diff line number Diff line
@@ -73,7 +73,7 @@ static int handle_unsupported_event(struct sk_buff *skb, struct genl_info *info) 
static int handle_generic_event(struct sk_buff *skb, struct genl_info *info);

static int ksmbd_ipc_heartbeat_request(void);



static const struct nla_policy ksmbd_nl_policy[KSMBD_EVENT_MAX] = {

static const struct nla_policy ksmbd_nl_policy[KSMBD_EVENT_MAX + 1] = {

	[KSMBD_EVENT_UNSPEC] = {

		.len = 0,

	},
@@ -396,7 +396,7 @@ static int handle_generic_event(struct sk_buff *skb, struct genl_info *info) 
		return -EPERM;

#endif



	if (type >= KSMBD_EVENT_MAX) {

	if (type > KSMBD_EVENT_MAX) {

		WARN_ON(1);

		return -EINVAL;

	}