Namjae Jeon 0ba5439d9a ksmbd: replace one-element array with flex-array member in struct smb2_ea_info ... UBSAN complains about out-of-bounds array indexes on 1-element arrays in struct smb2_ea_info. UBSAN: array-index-out-of-bounds in fs/smb/server/smb2pdu.c:4335:15 index 1 is out of range for type 'char [1]' CPU: 1 PID: 354 Comm: kworker/1:4 Not tainted 6.5.0-rc4 #1 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020 Workqueue: ksmbd-io handle_ksmbd_work [ksmbd] Call Trace: <TASK> __dump_stack linux/lib/dump_stack.c:88 dump_stack_lvl+0x48/0x70 linux/lib/dump_stack.c:106 dump_stack+0x10/0x20 linux/lib/dump_stack.c:113 ubsan_epilogue linux/lib/ubsan.c:217 __ubsan_handle_out_of_bounds+0xc6/0x110 linux/lib/ubsan.c:348 smb2_get_ea linux/fs/smb/server/smb2pdu.c:4335 smb2_get_info_file linux/fs/smb/server/smb2pdu.c:4900 smb2_query_info+0x63ae/0x6b20 linux/fs/smb/server/smb2pdu.c:5275 __process_request linux/fs/smb/server/server.c:145 __handle_ksmbd_work linux/fs/smb/server/server.c:213 handle_ksmbd_work+0x348/0x10b0 linux/fs/smb/server/server.c:266 process_one_work+0x85a/0x1500 linux/kernel/workqueue.c:2597 worker_thread+0xf3/0x13a0 linux/kernel/workqueue.c:2748 kthread+0x2b7/0x390 linux/kernel/kthread.c:389 ret_from_fork+0x44/0x90 linux/arch/x86/kernel/process.c:145 ret_from_fork_asm+0x1b/0x30 linux/arch/x86/entry/entry_64.S:304 </TASK> Cc: stable@vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon@kernel.org> Signed-off-by: Steve French <stfrench@microsoft.com>		2023-08-29 12:30:20 -05:00
..
mgmt	ksmbd: fix force create mode' and force directory mode'	2023-08-29 12:30:20 -05:00
asn1.c	ksmbd: switch to use kmemdup_nul() helper	2023-08-29 12:30:19 -05:00
asn1.h
auth.c	ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()	2023-08-29 12:30:20 -05:00
auth.h
connection.c	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
connection.h	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
crypto_ctx.c
crypto_ctx.h
glob.h
Kconfig
ksmbd_netlink.h	ksmbd: check if a mount point is crossed during path lookup	2023-07-23 10:25:11 -05:00
ksmbd_spnego_negtokeninit.asn1
ksmbd_spnego_negtokentarg.asn1
ksmbd_work.c	ksmbd: fix wrong interim response on compound	2023-08-29 12:30:19 -05:00
ksmbd_work.h	ksmbd: fix wrong interim response on compound	2023-08-29 12:30:19 -05:00
Makefile
misc.c
misc.h
ndr.c
ndr.h
nterr.h
ntlmssp.h
oplock.c	ksmbd: fix wrong DataOffset validation of create context	2023-08-29 12:30:20 -05:00
oplock.h
server.c	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
server.h
smb2misc.c	ksmbd: validate command request size	2023-08-05 20:56:54 -05:00
smb2ops.c
smb2pdu.c	ksmbd: replace one-element array with flex-array member in struct smb2_ea_info	2023-08-29 12:30:20 -05:00
smb2pdu.h	ksmbd: replace one-element array with flex-array member in struct smb2_ea_info	2023-08-29 12:30:20 -05:00
smb_common.c	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
smb_common.h	ksmbd: fix out of bounds in init_smb2_rsp_hdr()	2023-07-23 10:25:11 -05:00
smbacl.c	ksmbd: Replace the ternary conditional operator with min()	2023-06-26 00:07:04 -05:00
smbacl.h
smbfsctl.h
smbstatus.h
transport_ipc.c	ksmbd: use kvzalloc instead of kvmalloc	2023-06-26 00:07:04 -05:00
transport_ipc.h
transport_rdma.c	ksmbd: reduce descriptor size if remaining bytes is less than request size	2023-08-29 12:30:20 -05:00
transport_rdma.h
transport_tcp.c
transport_tcp.h
unicode.c
unicode.h
uniupr.h
vfs_cache.c	ksmbd: add mnt_want_write to ksmbd vfs functions	2023-06-16 21:04:19 -05:00
vfs_cache.h
vfs.c	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
vfs.h	ksmbd: add support for read compound	2023-08-29 12:30:19 -05:00
xattr.h