Namjae Jeon 851c34f19c ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length ... commit fb533473d1 upstream. ksmbd allowed the actual frame length to be smaller than the rfc1002 length. If allowed, it is possible to allocates a large amount of memory that can be limited by credit management and can eventually cause memory exhaustion problem. This patch do not allow it except SMB2 Negotiate request which will be validated when message handling proceeds. Also, Allow a message that padded to 8byte boundary. Fixes: e2f34481b2 ("cifsd: add server-side procedures for SMB3") Cc: stable@vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon@kernel.org> Signed-off-by: Steve French <stfrench@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-03-10 09:39:57 +01:00
..
mgmt	ksmbd: Fix resource leak in ksmbd_session_rpc_open()	2022-12-31 13:14:31 +01:00
Kconfig	ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION	2021-11-18 19:16:07 +01:00
Makefile	…
asn1.c	…
asn1.h	…
auth.c	ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob	2023-01-12 11:59:19 +01:00
auth.h	…
connection.c	ksmbd: limit pdu length size according to connection status	2023-02-01 08:27:24 +01:00
connection.h	ksmbd: limits exceeding the maximum allowable outstanding requests	2022-01-27 11:02:53 +01:00
crypto_ctx.c	ksmbd: remove NTLMv1 authentication	2021-09-29 16:17:34 -05:00
crypto_ctx.h	ksmbd: remove NTLMv1 authentication	2021-09-29 16:17:34 -05:00
glob.h	ksmbd: fix version mismatch with out of tree	2021-10-07 10:18:34 -05:00
ksmbd_netlink.h	ksmbd: add max connections parameter	2023-02-01 08:27:24 +01:00
ksmbd_spnego_negtokeninit.asn1	…
ksmbd_spnego_negtokentarg.asn1	…
ksmbd_work.c	ksmbd: reorder and document on-disk and netlink structures in headers	2021-06-30 14:47:24 +09:00
ksmbd_work.h	ksmbd: change data type of volatile/persistent id to u64	2021-07-09 08:23:16 +09:00
misc.c	ksmbd: missing check for NULL in convert_to_nt_pathname()	2021-09-30 20:00:05 -05:00
misc.h	ksmbd: use LOOKUP_BENEATH to prevent the out of share access	2021-09-24 21:25:23 -05:00
ndr.c	ksmbd: downgrade ndr version error message to debug	2023-02-01 08:27:24 +01:00
ndr.h	ksmbd: add user namespace support	2021-07-02 16:27:10 +09:00
nterr.h	…
ntlmssp.h	…
oplock.c	ksmbd: add buffer validation for SMB2_CREATE_CONTEXT	2021-09-30 09:58:07 -05:00
oplock.h	ksmbd: remove SMB1 oplock level macros	2021-06-30 14:43:51 +09:00
server.c	ksmbd: fix endless loop when encryption for response fails	2022-10-26 12:34:26 +02:00
server.h	ksmbd: add max connections parameter	2023-02-01 08:27:24 +01:00
smb2misc.c	ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length	2023-03-10 09:39:57 +01:00
smb2ops.c	ksmbd: add support for smb2 max credit parameter	2022-01-27 11:02:53 +01:00
smb2pdu.c	ksmbd: do not sign response to session request for guest login	2023-02-01 08:27:24 +01:00
smb2pdu.h	ksmbd: limit pdu length size according to connection status	2023-02-01 08:27:24 +01:00
smb_common.c	ksmbd: Fix user namespace mapping	2022-10-26 12:34:26 +02:00
smb_common.h	ksmbd: add support for smb2 max credit parameter	2022-01-27 11:02:53 +01:00
smbacl.c	ksmbd: fix heap-based overflow in set_ntacl_dacl()	2022-08-21 15:17:48 +02:00
smbacl.h	ksmbd: fix heap-based overflow in set_ntacl_dacl()	2022-08-21 15:17:48 +02:00
smbfsctl.h	…
smbstatus.h	…
transport_ipc.c	ksmbd: add max connections parameter	2023-02-01 08:27:24 +01:00
transport_ipc.h	ksmbd: throttle session setup failures to avoid dictionary attacks	2021-10-20 00:07:10 -05:00
transport_rdma.c	ksmbd: add smbd max io size parameter	2023-02-01 08:27:24 +01:00
transport_rdma.h	ksmbd: add smbd max io size parameter	2023-02-01 08:27:24 +01:00
transport_tcp.c	ksmbd: add max connections parameter	2023-02-01 08:27:24 +01:00
transport_tcp.h	…
unicode.c	…
unicode.h	…
uniupr.h	…
vfs.c	vfs: fix copy_file_range() averts filesystem freeze protection	2022-12-19 12:36:39 +01:00
vfs.h	ksmbd: don't align last entry offset in smb2 query directory	2022-02-23 12:03:18 +01:00
vfs_cache.c	ksmbd: increment reference count of parent fp	2022-05-09 09:14:40 +02:00
vfs_cache.h	ksmbd: remove unused ksmbd_file_table_flush function	2021-09-03 23:29:45 -05:00
xattr.h	ksmbd: reorder and document on-disk and netlink structures in headers	2021-06-30 14:47:24 +09:00