diff options
| author |   Norbert Szetei <norbert@doyensec.com> | 2025-03-29 16:06:01 +0000 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2025-04-01 00:04:21 -0500 |
| commit | bf21e29d78cd2c2371023953d9c82dfef82ebb36 (patch) | |
| tree | 297eacb0736cb0149f90507f42abe5a5a2a6240d /net/lapb/lapb_timer.c | |
| parent | ksmbd: fix overflow in dacloffset bounds check (diff) | |
| download | wireguard-linux-bf21e29d78cd2c2371023953d9c82dfef82ebb36.tar.xz wireguard-linux-bf21e29d78cd2c2371023953d9c82dfef82ebb36.zip | |
ksmbd: validate zero num_subauth before sub_auth is accessed
Access psid->sub_auth[psid->num_subauth - 1] without checking
if num_subauth is non-zero leads to an out-of-bounds read.
This patch adds a validation step to ensure num_subauth != 0
before sub_auth is accessed.
Cc: stable@vger.kernel.org
Signed-off-by: Norbert Szetei <norbert@doyensec.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions