aboutsummaryrefslogtreecommitdiffstats
path: root/fs/cifs/smb2pdu.c
diff options
context:
space:
mode:
authorTaesoo Kim <tsgatesv@gmail.com>2015-03-21 19:08:30 -0400
committerSteve French <smfrench@gmail.com>2015-03-21 12:01:50 -0500
commit2bd50fb3d4d31f5168ecea221f291534cd0a96e9 (patch)
treefbc079983364b9d761b111f52d7a581cf7fc5b48 /fs/cifs/smb2pdu.c
parentcifs: fix use-after-free bug in find_writable_file (diff)
downloadlinux-dev-2bd50fb3d4d31f5168ecea221f291534cd0a96e9.tar.xz
linux-dev-2bd50fb3d4d31f5168ecea221f291534cd0a96e9.zip
cifs: potential memory leaks when parsing mnt opts
For example, when mount opt is redundently specified (e.g., "user=A,user=B,user=C"), kernel kept allocating new key/val with kstrdup() and overwrite previous ptr (to be freed). Althouhg mount.cifs in userspace performs a bit of sanitization (e.g., forcing one user option), current implementation is not robust. Other options such as iocharset and domainanme are similarly vulnerable. Signed-off-by: Taesoo Kim <tsgatesv@gmail.com> Signed-off-by: Steve French <smfrench@gmail.com>
Diffstat (limited to 'fs/cifs/smb2pdu.c')
0 files changed, 0 insertions, 0 deletions