From: Gustavo A. R. Silva <gustavoars@kernel.org>
Date: Wed, 21 Jun 2023 21:29:22 +0000 (-0600)
Subject: ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
X-Git-Tag: v6.6.7~2477^2~2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5211cc8727ed9701b04976ab47602955e5641bda;p=platform%2Fkernel%2Flinux-starfive.git

ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()

Prefer struct_size() over open-coded versions.

Link: https://github.com/KSPP/linux/issues/160
Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
---

diff --git a/fs/smb/server/smb_common.c b/fs/smb/server/smb_common.c
index a7e8106..b51f431 100644
--- a/fs/smb/server/smb_common.c
+++ b/fs/smb/server/smb_common.c
@@ -266,7 +266,7 @@ static int ksmbd_negotiate_smb_dialect(void *buf)
 		if (smb2_neg_size > smb_buf_length)
 			goto err_out;
 
-		if (smb2_neg_size + le16_to_cpu(req->DialectCount) * sizeof(__le16) >
+		if (struct_size(req, Dialects, le16_to_cpu(req->DialectCount)) >
 		    smb_buf_length)
 			goto err_out;