ksmbd: fix potencial out-of-bounds when buffer offset is invalid
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 18 Mar 2024 23:40:48 +0000 (08:40 +0900)
committerSteve French <stfrench@microsoft.com>
Tue, 19 Mar 2024 02:21:33 +0000 (21:21 -0500)
commitc6cd2e8d2d9aa7ee35b1fa6a668e32a22a9753da
treee8c1bb86025876a921b99e637478473d52bdd000
parenta80a486d72e20bd12c335bcd38b6e6f19356b0aa
ksmbd: fix potencial out-of-bounds when buffer offset is invalid

I found potencial out-of-bounds when buffer offset fields of a few requests
is invalid. This patch set the minimum value of buffer offset field to
->Buffer offset to validate buffer length.

Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2misc.c
fs/smb/server/smb2pdu.c