Namjae Jeon a677ebd8ca ksmbd: validate payload size in ipc response ...

If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc
response to ksmbd kernel server. ksmbd should validate payload size of
ipc response from ksmbd.mountd to avoid memory overrun or
slab-out-of-bounds. This patch validate 3 ipc response that has payload.

Cc: stable@vger.kernel.org
Reported-by: Chao Ma <machao2019@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>

2024-04-02 09:21:01 -05:00

..

ksmbd_ida.c

ksmbd: Remove usage of the deprecated ida_simple_xx() API

2024-01-09 12:52:33 -06:00

ksmbd_ida.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

share_config.c

ksmbd: validate payload size in ipc response

2024-04-02 09:21:01 -05:00

share_config.h

ksmbd: fix force create mode' and force directory mode'

2023-08-29 12:30:20 -05:00

tree_connect.c

ksmbd: fix race condition between tree conn lookup and disconnect

2023-10-04 21:56:28 -05:00

tree_connect.h

ksmbd: fix race condition between tree conn lookup and disconnect

2023-10-04 21:56:28 -05:00

user_config.c

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

user_config.h

ksmbd: Remove unused field in ksmbd_user struct

2023-10-22 19:06:27 -05:00

user_session.c

ksmbd: add support for durable handles v1/v2

2024-03-12 00:36:39 -05:00

user_session.h

ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session

2024-03-12 00:36:39 -05:00