diff options
| author | Paulo Alcantara <pc@manguebit.com> | 2023-12-11 16:26:40 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2023-12-11 21:30:39 +0300 |
| commit | eec04ea119691e65227a97ce53c0da6b9b74b0b7 (patch) | |
| tree | e8146e5823d313cbce452c3b4ab45e397e75f02b /fs/hpfs | |
| parent | a39b6ac3781d46ba18193c9dbb2110f31e9bffe9 (diff) | |
| download | linux-eec04ea119691e65227a97ce53c0da6b9b74b0b7.tar.xz | |
smb: client: fix OOB in receive_encrypted_standard()
Fix potential OOB in receive_encrypted_standard() if server returned a
large shdr->NextCommand that would end up writing off the end of
@next_buffer.
Fixes: b24df3e30cbf ("cifs: update receive_encrypted_standard to handle compounded responses")
Cc: stable@vger.kernel.org
Reported-by: Robert Morris <rtm@csail.mit.edu>
Signed-off-by: Paulo Alcantara (SUSE) <pc@manguebit.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'fs/hpfs')
0 files changed, 0 insertions, 0 deletions