3
0
Fork 0
forked from mirrors/linux
kernel/fs/smb/client
Namjae Jeon aa2a739a75 cifs: fix incorrect validation for num_aces field of smb_acl
parse_dcal() validate num_aces to allocate ace array.

f (num_aces > ULONG_MAX / sizeof(struct smb_ace *))

It is an incorrect validation that we can create an array of size ULONG_MAX.
smb_acl has ->size field to calculate actual number of aces in response buffer
size. Use this to check invalid num_aces.

Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
2025-03-02 22:50:54 -06:00
..
compress move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
asn1.c smb3: add support for IAKerb 2025-01-31 12:51:44 -06:00
cached_dir.c smb: Initialize cfid->tcon before performing network ops 2024-11-26 23:35:34 -06:00
cached_dir.h smb: During unmount, ensure all cached dir instances drop their dentry 2024-11-26 18:47:08 -06:00
cifs_debug.c smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation 2024-09-15 10:42:44 -05:00
cifs_debug.h
cifs_fs_sb.h
cifs_ioctl.h
cifs_spnego.c smb3: add support for IAKerb 2025-01-31 12:51:44 -06:00
cifs_spnego.h
cifs_spnego_negtokeninit.asn1
cifs_swn.c
cifs_swn.h
cifs_unicode.c cifs: Fix creating native symlinks pointing to current or parent directory 2024-10-06 22:57:12 -05:00
cifs_unicode.h
cifsacl.c cifs: fix incorrect validation for num_aces field of smb_acl 2025-03-02 22:50:54 -06:00
cifsacl.h smb: client: Correct typos in multiple comments across various files 2024-10-02 17:52:24 -05:00
cifsencrypt.c smb: client: parse av pair type 4 in CHALLENGE_MESSAGE 2025-01-19 19:33:59 -06:00
cifsfs.c cifs: Add support for creating native Windows sockets 2025-01-31 12:51:20 -06:00
cifsfs.h cifs: update internal version number 2025-01-31 12:51:44 -06:00
cifsglob.h smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions 2025-02-19 10:41:16 -06:00
cifspdu.h cifs: Fix struct FILE_ALL_INFO 2025-01-31 12:51:44 -06:00
cifsproto.h cifs: Remove unicode parameter from parse_reparse_point() function 2025-01-29 17:11:56 -06:00
cifsroot.c
cifssmb.c cifs: Fix the smb1 readv callback to correctly call netfs 2025-02-25 18:35:23 -06:00
compress.c smb/client: Fix logically dead code 2024-10-16 00:30:52 -05:00
compress.h smb: client: compress: LZ77 code improvements cleanup 2024-09-15 10:42:45 -05:00
connect.c cifs: Add support for creating native Windows sockets 2025-01-31 12:51:20 -06:00
dfs.c smb: client: don't trust DFSREF_STORAGE_SERVER bit 2025-02-05 21:09:00 -06:00
dfs.h smb: client: get rid of kstrdup() in get_ses_refpath() 2025-02-05 21:09:07 -06:00
dfs_cache.c smb: client: get rid of kstrdup() in get_ses_refpath() 2025-02-05 21:09:07 -06:00
dfs_cache.h
dir.c Provide stable parent and name to ->d_revalidate() instances 2025-01-30 09:13:35 -08:00
dns_resolve.c smb: client: provide dns_resolve_{unc,name} helpers 2025-01-19 19:34:00 -06:00
dns_resolve.h smb: client: provide dns_resolve_{unc,name} helpers 2025-01-19 19:34:00 -06:00
export.c
file.c cifs: pick channels for individual subrequests 2025-02-11 18:51:07 -06:00
fs_context.c cifs: Add support for creating native Windows sockets 2025-01-31 12:51:20 -06:00
fs_context.h cifs: Add support for creating native Windows sockets 2025-01-31 12:51:20 -06:00
fscache.c
fscache.h
inode.c cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes 2025-02-19 10:42:27 -06:00
ioctl.c convert cifs_ioctl_copychunk() 2024-11-03 01:28:07 -05:00
Kconfig smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig 2024-12-19 09:24:35 -06:00
link.c cifs: Add mount option -o symlink= for choosing symlink create type 2025-01-29 17:35:32 -06:00
Makefile smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation 2024-09-15 10:42:44 -05:00
misc.c smb: client: fix return value of parse_dfs_referrals() 2025-01-19 19:34:00 -06:00
namespace.c smb: client: sync the root session and superblock context passwords before automounting 2025-01-10 17:55:35 -06:00
netlink.c
netlink.h
netmisc.c cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM 2025-01-29 16:52:25 -06:00
nterr.c cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA 2025-01-26 23:12:03 -06:00
nterr.h cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA 2025-01-26 23:12:03 -06:00
ntlmssp.h
readdir.c cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c 2025-01-19 19:34:00 -06:00
reparse.c cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() 2025-02-19 10:42:25 -06:00
reparse.h smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions 2025-02-19 10:41:16 -06:00
rfc1002pdu.h cifs: Fix endian types in struct rfc1002_session_packet 2025-01-19 19:34:00 -06:00
sess.c smb3: add support for IAKerb 2025-01-31 12:51:44 -06:00
smb1ops.c smb: client: change lease epoch type from unsigned int to __u16 2025-02-06 10:01:22 -06:00
smb2file.c cifs: Fix parsing native symlinks directory/file type 2025-01-31 12:51:44 -06:00
smb2glob.h
smb2inode.c smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions 2025-02-19 10:41:16 -06:00
smb2maperror.c cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM 2025-01-29 16:52:25 -06:00
smb2misc.c Revert "smb: client: make SHA-512 TFM ephemeral" 2024-09-30 22:07:45 -05:00
smb2ops.c smb: client: Add check for next_buffer in receive_encrypted_standard() 2025-02-20 12:10:39 -06:00
smb2pdu.c smb: client: change lease epoch type from unsigned int to __u16 2025-02-06 10:01:22 -06:00
smb2pdu.h smb: client: correctly handle ErrorContextData as a flexible array 2025-01-19 19:34:00 -06:00
smb2proto.h smb: client: change lease epoch type from unsigned int to __u16 2025-02-06 10:01:22 -06:00
smb2transport.c smb: client: fix use-after-free of signing key 2024-11-17 22:20:54 -06:00
smbdirect.c smb: client: Correct typos in multiple comments across various files 2024-10-02 17:52:24 -05:00
smbdirect.h smb: client: Correct typos in multiple comments across various files 2024-10-02 17:52:24 -05:00
smbencrypt.c
smberr.h
trace.c
trace.h smb3: add missing tracepoint for querying wsl EAs 2025-01-19 19:34:00 -06:00
transport.c smb: client: improve compound padding in encryption 2024-11-21 10:45:49 -06:00
unc.c
winucase.c
xattr.c smb/client: rename cifs_ntsd to smb_ntsd 2024-09-15 10:42:44 -05:00