ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
[ Upstream commit 313dab08 ] An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf. Cc: stable@vger.kernel.org # v5.15+ Reported-by:Jordy Zomer <jordyzomer@google.com> Signed-off-by:
Jordy Zomer <jordyzomer@google.com> Signed-off-by:
Namjae Jeon <linkinjeon@kernel.org> Signed-off-by:
Steve French <stfrench@microsoft.com> Signed-off-by:
Sasha Levin <sashal@kernel.org>
Loading