Fedor Pchelkin 6ee943ccdb ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails ...

commit 108a020c64 upstream.

ksmbd_iov_pin_rsp_read() doesn't free the provided aux buffer if it
fails. Seems to be the caller's responsibility to clear the buffer in
error case.

Found by Linux Verification Center (linuxtesting.org).

Fixes: e2b76ab8b5 ("ksmbd: add support for read compound")
Cc: stable@vger.kernel.org
Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-02-23 09:51:45 +01:00

..

mgmt

ksmbd: Remove unused field in ksmbd_user struct

2023-10-22 19:06:27 -05:00

asn1.c

ksmbd: validate mech token in session setup

2024-01-25 15:45:12 -08:00

asn1.h

…

auth.c

ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

2023-08-29 12:30:20 -05:00

auth.h

…

connection.c

ksmbd: Add missing set_freezable() for freezable kthread

2024-01-31 16:21:04 -08:00

connection.h

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

2024-01-25 15:45:12 -08:00

crypto_ctx.c

…

crypto_ctx.h

…

glob.h

…

Kconfig

ksmbd: remove experimental warning

2023-09-03 21:06:36 -05:00

ksmbd_netlink.h

ksmbd: fix global oob in ksmbd_nl_policy

2024-01-31 16:21:12 -08:00

ksmbd_spnego_negtokeninit.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

ksmbd_spnego_negtokentarg.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

ksmbd_work.c

ksmbd: release interim response after sending status pending response

2023-11-23 20:50:45 -06:00

ksmbd_work.h

ksmbd: fix wrong interim response on compound

2023-08-29 12:30:19 -05:00

Makefile

…

misc.c

…

misc.h

…

ndr.c

…

ndr.h

…

nterr.h

…

ntlmssp.h

…

oplock.c

ksmbd: send lease break notification on FILE_RENAME_INFORMATION

2024-01-31 16:21:04 -08:00

oplock.h

ksmbd: lazy v2 lease break on smb2_write()

2023-12-08 10:11:33 -06:00

server.c

ksmbd: fix race condition between tree conn lookup and disconnect

2023-10-04 21:56:28 -05:00

server.h

…

smb2misc.c

ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

2023-12-27 22:55:36 -06:00

smb2ops.c

ksmbd: set v2 lease capability

2023-12-05 20:43:23 -06:00

smb2pdu.c

ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails

2024-02-23 09:51:45 +01:00

smb2pdu.h

ksmbd: replace one-element array with flex-array member in struct smb2_ea_info

2023-08-29 12:30:20 -05:00

smb_common.c

ksmbd: validate the zero field of packet header

2024-01-25 15:45:08 -08:00

smb_common.h

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

2023-07-23 10:25:11 -05:00

smbacl.c

ksmbd: free ppace array on error in parse_dacl

2024-01-20 11:53:01 +01:00

smbacl.h

ksmbd: fix possible deadlock in smb2_open

2023-11-23 20:50:45 -06:00

smbfsctl.h

…

smbstatus.h

…

transport_ipc.c

ksmbd: fix global oob in ksmbd_nl_policy

2024-01-31 16:21:12 -08:00

transport_ipc.h

…

transport_rdma.c

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

2024-01-25 15:45:12 -08:00

transport_rdma.h

…

transport_tcp.c

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

2024-01-25 15:45:12 -08:00

transport_tcp.h

…

unicode.c

ksmbd: add support for surrogate pair conversion

2023-10-22 19:06:27 -05:00

unicode.h

fs/smb: Swing unicode common code from smb->NLS

2023-08-30 08:55:51 -05:00

vfs_cache.c

ksmbd: send v2 lease break notification for directory

2023-12-08 10:11:33 -06:00

vfs_cache.h

ksmbd: lazy v2 lease break on smb2_write()

2023-12-08 10:11:33 -06:00

vfs.c

ksmbd: lazy v2 lease break on smb2_write()

2023-12-08 10:11:33 -06:00

vfs.h

ksmbd: fix possible deadlock in smb2_open

2023-11-23 20:50:45 -06:00

xattr.h

…