cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
authorRonnie Sahlberg <lsahlber@redhat.com>
Tue, 16 Jul 2019 00:41:46 +0000 (10:41 +1000)
committerSteve French <stfrench@microsoft.com>
Tue, 16 Jul 2019 02:20:09 +0000 (21:20 -0500)
commit88a92c913cef09e70b1744a8877d177aa6cb2189
tree963990acacc7764fd1d094cba922547489d866b1
parentce465bf94b70f03136171a62b607864f00093b19
cifs: fix crash in smb2_compound_op()/smb2_set_next_command()

RHBZ: 1722704

In low memory situations the various SMB2_*_init() functions can fail
to allocate a request PDU and thus leave the request iovector as NULL.

If we don't check the return code for failure we end up calling
smb2_set_next_command() with a NULL iovector causing a crash when it tries
to dereference it.

CC: Stable <stable@vger.kernel.org>
Signed-off-by: Ronnie Sahlberg <lsahlber@redhat.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/cifs/smb2inode.c
fs/cifs/smb2ops.c