ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
authorNamjae Jeon <linkinjeon@kernel.org>
Fri, 12 Apr 2024 00:45:00 +0000 (09:45 +0900)
committerSteve French <stfrench@microsoft.com>
Sat, 20 Apr 2024 01:48:47 +0000 (20:48 -0500)
commit17cf0c2794bdb6f39671265aa18aea5c22ee8c4a
tree4753df1ab69cee91533f4d250cfc2fd7bb1ac96f
parentc119f4ede3fa90a9463f50831761c28f989bfb20
ksmbd: validate request buffer size in smb2_allocate_rsp_buf()

The response buffer should be allocated in smb2_allocate_rsp_buf
before validating request. But the fields in payload as well as smb2 header
is used in smb2_allocate_rsp_buf(). This patch add simple buffer size
validation to avoid potencial out-of-bounds in request buffer.

Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2pdu.c