ksmbd: fix out of bounds in smb3_decrypt_req()
authorNamjae Jeon <linkinjeon@kernel.org>
Fri, 21 Jul 2023 15:09:28 +0000 (00:09 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 13 Sep 2023 07:42:21 +0000 (09:42 +0200)
commit9776024ee06b352a995830fc8f3cdaae49de1a51
tree79d5129c3e0c7523743bb5f65ecae0905512cfe5
parent513eac8b85304dde069dc217e0423c7f7680b6ba
ksmbd: fix out of bounds in smb3_decrypt_req()

[ Upstream commit dc318846f3dd54574a36ae97fc8d8b75dd7cdb1e ]

smb3_decrypt_req() validate if pdu_length is smaller than
smb2_transform_hdr size.

Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21589
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/smb/server/smb2pdu.c