diff options
| author |   Namjae Jeon <linkinjeon@kernel.org> | 2023-05-03 08:43:30 +0900 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2023-05-03 23:03:01 -0500 |
| commit | b096d97f47326b1e2dbdef1c91fab69ffda54d17 (patch) | |
| tree | 891546a8e79c2faf6821b0072e1fc1bb9504ee89 /scripts/generate_rust_analyzer.py | |
| parent | ksmbd: destroy expired sessions (diff) | |
| download | linux-rng-b096d97f47326b1e2dbdef1c91fab69ffda54d17.tar.xz linux-rng-b096d97f47326b1e2dbdef1c91fab69ffda54d17.zip | |
ksmbd: block asynchronous requests when making a delay on session setup
ksmbd make a delay of 5 seconds on session setup to avoid dictionary
attacks. But the 5 seconds delay can be bypassed by using asynchronous
requests. This patch block all requests on current connection when
making a delay on sesstion setup failure.
Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20482
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions