diff options
| author | Anatolii Shumak <anatoliy.shumak@gmail.com> | 2026-08-01 08:19:53 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2026-08-03 11:21:22 -0500 |
| commit | ba3afa8ccd154962c4a6b975b6e8b11027c5ab95 (patch) | |
| tree | 6fb9559341eeb175e786700cc2f523bfa3947268 /tools/perf/scripts/python/bin/task-analyzer-record | |
| parent | 0710dd08824a6f3b9892fc5be24acd2e4a36f178 (diff) | |
ksmbd: validate compression Flags before kvmalloc
ksmbd_decompress_request() allocated the decompressed request buffer
before smb_compression_decompress() rejected unknown transform Flags or
chained mode when it was not negotiated. A remote peer could force a
transient multi-megabyte allocation that was immediately freed on
-EINVAL.
Validate CHAINED/NONE Flags and compress_chained before kvmalloc.
Link: https://github.com/namjaejeon/ksmbd/issues/529
Fixes: a08de24c2b85 ("ksmbd: negotiate and decode SMB2 compression")
Signed-off-by: Anatolii Shumak <anatoliy.shumak@gmail.com>
Reviewed-by: ChenXiaoSong <chenxiaosong@kylinos.cn>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/task-analyzer-record')
0 files changed, 0 insertions, 0 deletions