diff options
| author |   Namjae Jeon <linkinjeon@kernel.org> | 2024-03-31 21:59:10 +0900 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2024-04-02 09:21:01 -0500 |
| commit | a677ebd8ca2f2632ccdecbad7b87641274e15aac (patch) | |
| tree | cf2213396ae63bd01827e1185b9a8f85aafb3476 /drivers/fpga/fpga-mgr.c | |
| parent | ksmbd: don't send oplock break if rename fails (diff) | |
| download | wireguard-linux-a677ebd8ca2f2632ccdecbad7b87641274e15aac.tar.xz wireguard-linux-a677ebd8ca2f2632ccdecbad7b87641274e15aac.zip | |
ksmbd: validate payload size in ipc response
If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc
response to ksmbd kernel server. ksmbd should validate payload size of
ipc response from ksmbd.mountd to avoid memory overrun or
slab-out-of-bounds. This patch validate 3 ipc response that has payload.
Cc: stable@vger.kernel.org
Reported-by: Chao Ma <machao2019@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'drivers/fpga/fpga-mgr.c')
0 files changed, 0 insertions, 0 deletions