diff options
| author | Pavel Shilovsky <pshilov@microsoft.com> | 2017-03-01 03:05:19 +0300 |
|---|---|---|
| committer | Steve French <smfrench@gmail.com> | 2017-03-02 01:42:40 +0300 |
| commit | 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 (patch) | |
| tree | 308037a3f6b3b5fb7a851a01a53e0c36fbaeb28f /fs/cifs/cifspdu.h | |
| parent | 6053dc981449718d90a429933e99b441e1adaea6 (diff) | |
| download | linux-61cfac6f267dabcf2740a7ec8a0295833b28b5f5.tar.xz | |
CIFS: Fix possible use after free in demultiplex thread
The recent changes that added SMB3 encryption support introduced
a possible use after free in the demultiplex thread. When we
process an encrypted packed we obtain a pointer to SMB session
but do not obtain a reference. This can possibly lead to a situation
when this session was freed before we copy a decryption key from
there. Fix this by obtaining a copy of the key rather than a pointer
to the session under a spinlock.
Signed-off-by: Pavel Shilovsky <pshilov@microsoft.com>
Signed-off-by: Steve French <smfrench@gmail.com>
Diffstat (limited to 'fs/cifs/cifspdu.h')
0 files changed, 0 insertions, 0 deletions