ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length
authorNamjae Jeon <linkinjeon@kernel.org>
Fri, 10 Feb 2023 15:27:34 +0000 (00:27 +0900)
committerSteve French <stfrench@microsoft.com>
Wed, 15 Feb 2023 06:04:38 +0000 (00:04 -0600)
commitfb533473d1595fe79ecb528fda1de33552b07178
tree6299989a902ccef938342075a5df43a0a495875c
parent8f8c43b125882ac14372f8dca0c8e50a59e78d79
ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length

ksmbd allowed the actual frame length to be smaller than the rfc1002
length. If allowed, it is possible to allocates a large amount of memory
that can be limited by credit management and can eventually cause memory
exhaustion problem. This patch do not allow it except SMB2 Negotiate
request which will be validated when message handling proceeds.
Also, Allow a message that padded to 8byte boundary.

Fixes: e2f34481b24d ("cifsd: add server-side procedures for SMB3")
Cc: stable@vger.kernel.org
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/ksmbd/smb2misc.c