android_kernel_samsung_sm8650/fs/smb/client
Paulo Alcantara 5411e32927 smb: client: fix potential OOB in smb2_dump_detail()
[ Upstream commit 567320c46a60a3c39b69aa1df802d753817a3f86 ]

Validate SMB message with ->check_message() before calling
->calc_smb_size().

This fixes CVE-2023-6610.

Reported-by: j51569436@gmail.com
Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218219
Cc; stable@vger.kernel.org
Signed-off-by: Paulo Alcantara <pc@manguebit.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-01-20 11:50:09 +01:00
..
asn1.c
cached_dir.c cifs: update desired access while requesting for directory lease 2023-09-19 12:27:57 +02:00
cached_dir.h
cifs_debug.c smb: client: fix potential OOB in cifs_dump_detail() 2024-01-01 12:39:04 +00:00
cifs_debug.h
cifs_dfs_ref.c cifs: use fs_context for automounts 2023-09-19 12:28:00 +02:00
cifs_fs_sb.h
cifs_ioctl.h smb3: allow dumping session and tcon id to improve stats analysis and debugging 2023-12-03 07:32:09 +01:00
cifs_spnego_negtokeninit.asn1
cifs_spnego.c cifs: spnego: add ';' in HOST_KEY_LEN 2023-11-28 17:07:06 +00:00
cifs_spnego.h
cifs_swn.c
cifs_swn.h
cifs_unicode.c
cifs_unicode.h
cifs_uniupr.h
cifsacl.c
cifsacl.h
cifsencrypt.c
cifsfs.c cifs: fix flushing folio regression for 6.1 backport 2024-01-15 18:54:51 +01:00
cifsfs.h cifs: minor cleanup of some headers 2023-12-03 07:32:09 +01:00
cifsglob.h cifs: do not depend on release_iface for maintaining iface_list 2024-01-10 17:10:21 +01:00
cifspdu.h smb: client, common: fix fortify warnings 2024-01-20 11:50:04 +01:00
cifsproto.h smb: client: fix potential deadlock when releasing mids 2023-11-28 17:07:15 +00:00
cifsroot.c
cifssmb.c smb: client, common: fix fortify warnings 2024-01-20 11:50:04 +01:00
connect.c cifs: cifs_chan_is_iface_active should be called with chan_lock held 2024-01-10 17:10:21 +01:00
dfs_cache.c
dfs_cache.h
dir.c
dns_resolve.c
dns_resolve.h
export.c
file.c cifs: Release folio lock on fscache read hit. 2023-08-23 17:52:39 +02:00
fs_context.c fs/smb/client: Reset password pointer to NULL 2023-10-06 14:57:05 +02:00
fs_context.h
fscache.c mm, netfs, fscache: stop read optimisation when folio removed from pagecache 2024-01-10 17:10:31 +01:00
fscache.h
inode.c smb: client: fix missing mode bits for SMB symlinks 2024-01-10 17:10:32 +01:00
ioctl.c smb3: allow dumping session and tcon id to improve stats analysis and debugging 2023-12-03 07:32:09 +01:00
Kconfig
link.c
Makefile
misc.c smb: client: fix OOB in smbCalcSize() 2024-01-01 12:39:05 +00:00
netlink.c
netlink.h
netmisc.c
nterr.c
nterr.h
ntlmssp.h
readdir.c
rfc1002pdu.h
sess.c cifs: account for primary channel in the interface list 2023-12-03 07:32:09 +01:00
smb1ops.c
smb2file.c smb3: Replace smb2pdu 1-element arrays with flex-arrays 2024-01-10 17:10:37 +01:00
smb2glob.h
smb2inode.c smb: client: fix broken file attrs with nodfs mounts 2023-07-19 16:21:44 +02:00
smb2maperror.c
smb2misc.c smb: client: fix potential OOB in smb2_dump_detail() 2024-01-20 11:50:09 +01:00
smb2ops.c smb: client: fix potential OOB in smb2_dump_detail() 2024-01-20 11:50:09 +01:00
smb2pdu.c smb: client, common: fix fortify warnings 2024-01-20 11:50:04 +01:00
smb2pdu.h smb: client, common: fix fortify warnings 2024-01-20 11:50:04 +01:00
smb2proto.h
smb2status.h
smb2transport.c cifs: fix check of rc in function generate_smb3signingkey 2023-11-28 17:07:07 +00:00
smbdirect.c
smbdirect.h
smbencrypt.c
smberr.h
trace.c
trace.h
transport.c smb: client: fix potential deadlock when releasing mids 2023-11-28 17:07:15 +00:00
unc.c
winucase.c
xattr.c smb3: fix caching of ctime on setxattr 2023-11-28 17:07:15 +00:00