iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/cifs
History
Paulo Alcantara 212253367d cifs: fix potential use-after-free in cifs_echo_request() 
This patch fixes a potential use-after-free bug in
cifs_echo_request().

For instance,

  thread 1
  --------
  cifs_demultiplex_thread()
    clean_demultiplex_info()
      kfree(server)

  thread 2 (workqueue)
  --------
  apic_timer_interrupt()
    smp_apic_timer_interrupt()
      irq_exit()
        __do_softirq()
          run_timer_softirq()
            call_timer_fn()
	      cifs_echo_request() <- use-after-free in server ptr

Signed-off-by: Paulo Alcantara (SUSE) <pc@cjr.nz>
CC: Stable <stable@vger.kernel.org>
Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
2020-11-30 15:23:45 -06:00
..
asn1.c
cifs: remove bogus debug code
2020-10-22 12:17:52 -05:00
cache.c
smb3: extend fscache mount volume coherency check
2020-06-06 11:16:25 -05:00
cifs_debug.c
cifs: Display local UID details for SMB sessions in DebugData
2020-07-01 19:38:19 -05:00
cifs_debug.h
cifs: Standardize logging output
2020-06-01 00:10:18 -05:00
cifs_dfs_ref.c
cifs: fix potential mismatch of UNC paths
2020-02-24 14:20:38 -06:00
cifs_fs_sb.h
smb3: add mount option to allow RW caching of share accessed by only 1 client
2019-09-16 11:43:38 -05:00
cifs_ioctl.h
cifs: add SMB3 change notification support
2020-02-06 09:14:28 -06:00
cifs_spnego.c
cifs: switch servers depending on binding state
2019-11-25 01:16:30 -06:00
cifs_spnego.h
…
cifs_unicode.c
Convert trailing spaces and periods in path components
2020-10-11 23:57:18 -05:00
cifs_unicode.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
cifs_uniupr.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
cifsacl.c
cifs: fix a memleak with modefromsid
2020-11-15 23:05:33 -06:00
cifsacl.h
cifs: delete duplicated words in header files
2020-08-02 18:00:26 -05:00
cifsencrypt.c
mm, treewide: rename kzfree() to kfree_sensitive()
2020-08-07 11:33:22 -07:00
cifsfs.c
smb3.1.1: add new module load parm enable_gcm_256
2020-10-15 23:58:15 -05:00
cifsfs.h
cifs: update internal module version number
2020-10-23 23:41:49 -05:00
cifsglob.h
smb3: add support for stat of WSL reparse points for special file types
2020-10-23 15:38:10 -05:00
cifspdu.h
cifs: cifspdu.h: Replace zero-length array with flexible-array member
2020-03-22 22:49:10 -05:00
cifsproto.h
SMB3.1.1: Fix ids returned in POSIX query dir
2020-10-20 11:51:24 -05:00
cifsroot.c
cifs: Standardize logging output
2020-06-01 00:10:18 -05:00
cifssmb.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
connect.c
cifs: fix potential use-after-free in cifs_echo_request()
2020-11-30 15:23:45 -06:00
dfs_cache.c
Merge branch 'akpm' (patches from Andrew)
2020-08-07 11:39:33 -07:00
dfs_cache.h
cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect
2020-08-02 18:00:26 -05:00
dir.c
smb311: add support for using info level for posix extensions query
2020-06-12 08:54:12 -05:00
dns_resolve.c
keys: Pass the network namespace into request_key mechanism
2019-06-27 23:02:12 +01:00
dns_resolve.h
…
export.c
docs: fs: convert docs without extension to ReST
2019-07-31 13:31:05 -06:00
file.c
cifs: remove the retry in cifs_poxis_lock_set
2020-07-07 23:51:16 -05:00
fs_context.c
cifs: move smb version mount options into fs_context.c
2020-10-22 12:17:31 -05:00
fs_context.h
cifs: move smb version mount options into fs_context.c
2020-10-22 12:17:31 -05:00
fscache.c
smb3: extend fscache mount volume coherency check
2020-06-06 11:16:25 -05:00
fscache.h
smb3: extend fscache mount volume coherency check
2020-06-06 11:16:25 -05:00
inode.c
smb3: add support for stat of WSL reparse points for special file types
2020-10-23 15:38:10 -05:00
ioctl.c
cifs: fix reference leak for tlink
2020-07-09 10:06:52 -05:00
Kconfig
smb3: smbdirect support can be configured by default
2020-04-07 13:39:00 -05:00
link.c
smb311: add support for using info level for posix extensions query
2020-06-12 08:54:12 -05:00
Makefile
cifs: add files to host new mount api
2020-10-22 12:16:24 -05:00
misc.c
Merge branch 'akpm' (patches from Andrew)
2020-08-07 11:39:33 -07:00
netmisc.c
cifs`: handle ERRBaduid for SMB1
2020-08-02 18:00:25 -05:00
nterr.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 61
2019-05-24 17:36:45 +02:00
nterr.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 61
2019-05-24 17:36:45 +02:00
ntlmssp.h
cifs: dynamic allocation of ntlmssp blob
2016-06-23 23:45:07 -05:00
readdir.c
SMB3: add support for recognizing WSL reparse tags
2020-10-22 12:17:59 -05:00
rfc1002pdu.h
…
sess.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
smb1ops.c
cifs: smb1: Try failing back to SetFileInfo if SetPathInfo fails
2020-08-02 18:00:25 -05:00
smb2file.c
cifs: allow unlock flock and OFD lock across fork
2020-03-22 22:49:09 -05:00
smb2glob.h
smb3.1.1: set gcm256 when requested
2020-10-19 15:11:11 -05:00
smb2inode.c
smb3: add support for stat of WSL reparse points for special file types
2020-10-23 15:38:10 -05:00
smb2maperror.c
cifs: map STATUS_ACCOUNT_LOCKED_OUT to -EACCES
2020-10-15 23:58:14 -05:00
smb2misc.c
cifs: Fix leak when handling lease break for cached root fid
2020-08-02 18:00:25 -05:00
smb2ops.c
smb3: Handle error case during offload read path
2020-11-15 23:05:33 -06:00
smb2pdu.c
cifs: make const array static, makes object smaller
2020-10-20 11:52:44 -05:00
smb2pdu.h
smb3: add some missing definitions from MS-FSCC
2020-10-23 15:38:10 -05:00
smb2proto.h
smb3: add support for stat of WSL reparse points for special file types
2020-10-23 15:38:10 -05:00
smb2status.h
cifs: don't use __constant_cpu_to_le32()
2019-05-07 23:24:54 -05:00
smb2transport.c
smb3.1.1: set gcm256 when requested
2020-10-19 15:11:11 -05:00
smbdirect.c
cifs: Standardize logging output
2020-06-01 00:10:18 -05:00
smbdirect.h
cifs: smbd: Do not schedule work to send immediate packet on every receive
2020-04-07 12:41:16 -05:00
smbencrypt.c
fs: cifs: move from the crypto cipher API to the new DES library interface
2019-08-22 14:57:34 +10:00
smberr.h
…
smbfsctl.h
smb3: add some missing definitions from MS-FSCC
2020-10-23 15:38:10 -05:00
trace.c
smb3: Cleanup license mess
2019-01-24 09:37:33 -06:00
trace.h
smb3: add dynamic trace point to trace when credits obtained
2020-10-20 11:50:42 -05:00
transport.c
cifs: allow syscalls to be restarted in __smb_send_rqst()
2020-11-30 15:23:31 -06:00
winucase.c
Replace HTTP links with HTTPS ones: CIFS
2020-07-05 14:23:38 -06:00
xattr.c
CIFS: Add support for setting owner info, dos attributes, and create time
2020-01-26 19:24:17 -06:00