Pavel Shilovsky adc58bfd4d CIFS: Fix a possible invalid memory access in smb2_query_symlink() ...

commit 7893242e2465aea6f2cbc2639da8fa5ce96e8cc2 upstream.

During following a symbolic link we received err_buf from SMB2_open().
While the validity of SMB2 error response is checked previously
in smb2_check_message() a symbolic link payload is not checked at all.
Fix it by adding such checks.

Cc: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pavel Shilovsky <pshilovsky@samba.org>
Signed-off-by: Steve French <smfrench@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-08-20 18:09:20 +02:00

..

asn1.c

[CIFS] cifs: Rename cERROR and cFYI to cifs_dbg

2013-05-04 22:17:23 -05:00

cache.c

[CIFS] cifs: Rename cERROR and cFYI to cifs_dbg

2013-05-04 22:17:23 -05:00

cifs_debug.c

cifs: Ratelimit kernel log messages

2016-02-25 12:01:17 -08:00

cifs_debug.h

cifs: Ratelimit kernel log messages

2016-02-25 12:01:17 -08:00

cifs_dfs_ref.c

Fix that several functions handle incorrect value of mapchars

2015-05-10 19:56:35 -05:00

cifs_fs_sb.h

fs/cifs: make share unaccessible at root level mountable

2016-08-20 18:09:20 +02:00

cifs_ioctl.h

Add way to query server fs info for smb3

2015-08-20 10:19:25 -05:00

cifs_spnego.c

KEYS: Merge the type-specific data with the payload data

2015-10-21 15:18:36 +01:00

cifs_spnego.h

[CIFS] Rename three structures to avoid camel case

2011-05-27 04:34:02 +00:00

cifs_unicode.c

File names with trailing period or space need special case conversion

2016-07-27 09:47:39 -07:00

cifs_unicode.h

File names with trailing period or space need special case conversion

2016-07-27 09:47:39 -07:00

cifs_uniupr.h

…

cifsacl.c

KEYS: Merge the type-specific data with the payload data

2015-10-21 15:18:36 +01:00

cifsacl.h

cifs: fix SID binary to string conversion

2012-12-11 11:48:49 -06:00

cifsencrypt.c

cifs: fix crash due to race in hmac(md5) handling

2016-08-20 18:09:20 +02:00

cifsfs.c

fs/cifs: make share unaccessible at root level mountable

2016-08-20 18:09:20 +02:00

cifsfs.h

Fix cifs_uniqueid_to_ino_t() function for s390x

2016-03-09 15:34:50 -08:00

cifsglob.h

Add resilienthandles mount parm

2015-11-03 10:10:36 -06:00

cifspdu.h

Add way to query server fs info for smb3

2015-08-20 10:19:25 -05:00

cifsproto.h

Fix that several functions handle incorrect value of mapchars

2015-05-10 19:56:35 -05:00

cifssmb.c

CIFS: Fix SMB2+ interim response processing for read requests

2016-03-09 15:34:50 -08:00

connect.c

fs/cifs: make share unaccessible at root level mountable

2016-08-20 18:09:20 +02:00

dir.c

cifs: Check for existing directory when opening file with O_CREAT

2016-08-20 18:09:20 +02:00

dns_resolve.c

cifs: fix composing of mount options for DFS referrals

2013-05-24 13:08:31 -05:00

dns_resolve.h

…

export.c

[CIFS] cifs: Rename cERROR and cFYI to cifs_dbg

2013-05-04 22:17:23 -05:00

file.c

mm, fs: introduce mapping_gfp_constraint()

2015-11-06 17:50:42 -08:00

fscache.c

NFS client updates for Linux 3.13

2013-11-08 05:57:46 +09:00

fscache.h

CIFS: FS-Cache: Uncache unread pages in cifs_readpages() before freeing them

2013-09-18 10:17:03 -05:00

inode.c

fs/cifs: make share unaccessible at root level mountable

2016-08-20 18:09:20 +02:00

ioctl.c

Allow copy offload (CopyChunk) across shares

2015-11-09 09:28:48 -06:00

Kconfig

Allow parsing vers=3.11 on cifs mount

2015-06-27 20:23:32 -07:00

link.c

Merge branch 'for-linus-1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-06-22 12:51:21 -07:00

Makefile

cifs: add new case-insensitive conversion routines that are based on wchar_t's

2013-09-08 14:38:05 -05:00

misc.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

netmisc.c

Fix signed/unsigned pointer warning

2014-12-14 14:55:57 -06:00

nterr.c

CIFS: Rename 7 error codes to NT_ style

2012-07-24 10:25:10 -05:00

nterr.h

CIFS: Rename 7 error codes to NT_ style

2012-07-24 10:25:10 -05:00

ntlmssp.h

cifs: dynamic allocation of ntlmssp blob

2016-07-27 09:47:39 -07:00

readdir.c

cifs_dbg() outputs an uninitialized buffer in cifs_readdir()

2016-02-25 12:01:17 -08:00

rfc1002pdu.h

…

sess.c

cifs: dynamic allocation of ntlmssp blob

2016-07-27 09:47:39 -07:00

smb1ops.c

Fix that several functions handle incorrect value of mapchars

2015-05-10 19:56:35 -05:00

smb2file.c

Add resilienthandles mount parm

2015-11-03 10:10:36 -06:00

smb2glob.h

remove directory incorrectly tries to set delete on close on non-empty directories

2016-06-01 12:15:48 -07:00

smb2inode.c

remove directory incorrectly tries to set delete on close on non-empty directories

2016-06-01 12:15:48 -07:00

smb2maperror.c

Fix problem recognizing symlinks

2014-10-02 14:10:04 -05:00

smb2misc.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

smb2ops.c

CIFS: Fix a possible invalid memory access in smb2_query_symlink()

2016-08-20 18:09:20 +02:00

smb2pdu.c

cifs: dynamic allocation of ntlmssp blob

2016-07-27 09:47:39 -07:00

smb2pdu.h

[SMB3] Send durable handle v2 contexts when use of persistent handles required

2015-11-03 09:26:27 -06:00

smb2proto.h

remove directory incorrectly tries to set delete on close on non-empty directories

2016-06-01 12:15:48 -07:00

smb2status.h

CIFS: Add SMB2 status codes

2012-07-24 10:25:13 -05:00

smb2transport.c

Convert MessageID in smb2_hdr to LE

2014-12-14 14:55:45 -06:00

smbencrypt.c

cifs: use memzero_explicit to clear stack buffer

2015-01-19 15:32:13 -06:00

smberr.h

…

smbfsctl.h

[SMB3] Send durable handle v2 contexts when use of persistent handles required

2015-11-03 09:26:27 -06:00

transport.c

cifs: fix race between call_async() and reconnect()

2016-02-25 12:01:17 -08:00

winucase.c

[CIFS] quiet sparse compile warning

2013-09-08 14:54:24 -05:00

xattr.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00