]> git.hungrycats.org Git - linux/commit
ksmbd: fix slab out of bounds write in smb_inherit_dacl()
authorNamjae Jeon <linkinjeon@kernel.org>
Sun, 5 Nov 2023 03:46:24 +0000 (12:46 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 28 Nov 2023 17:15:04 +0000 (17:15 +0000)
commit09d9d8b40a3338193619c14ed4dc040f4f119e70
tree2c35f011de6e781f92fb2c7ec3aaab0d96eda904
parent8434e02379135fa97476de3104af98a6b9532785
ksmbd: fix slab out of bounds write in smb_inherit_dacl()

commit eebff19acaa35820cb09ce2ccb3d21bee2156ffb upstream.

slab out-of-bounds write is caused by that offsets is bigger than pntsd
allocation size. This patch add the check to validate 3 offsets using
allocation size.

Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-22271
Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/server/smbacl.c