smb3: check xattr value length earlier
authorSteve French <stfrench@microsoft.com>
Tue, 12 Jul 2022 16:43:44 +0000 (11:43 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Aug 2022 09:40:45 +0000 (11:40 +0200)
commitecdba236bc352320ffa8c7cef41c5e83906e94de
treed529db53e1d1a239b99aa404e953da1d8e8079ba
parent3c201130cc81623771982615fef53df79034add7
smb3: check xattr value length earlier

[ Upstream commit 5fa2cffba0b82336a2244d941322eb1627ff787b ]

Coverity complains about assigning a pointer based on
value length before checking that value length goes
beyond the end of the SMB.  Although this is even more
unlikely as value length is a single byte, and the
pointer is not dereferenced until laterm, it is clearer
to check the lengths first.

Addresses-Coverity: 1467704 ("Speculative execution data leak")
Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/cifs/smb2ops.c