linux/fs/smb/server
Namjae Jeon 3df0411e13 ksmbd: validate session id and tree id in compound request
`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session()
will always return the first request smb2 header in a compound request.
if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will
return 0, i.e. The tree id check is skipped.
This patch use ksmbd_req_buf_next() to get current command in compound.

Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21506
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
2023-07-23 10:25:11 -05:00
..
mgmt ksmbd: remove unused ksmbd_tree_conn_share function 2023-06-26 00:07:04 -05:00
asn1.c
asn1.h
auth.c
auth.h
connection.c ksmbd: validate smb request protocol id 2023-06-02 12:30:57 -05:00
connection.h
crypto_ctx.c
crypto_ctx.h
glob.h
Kconfig
ksmbd_netlink.h ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
ksmbd_spnego_negtokeninit.asn1
ksmbd_spnego_negtokentarg.asn1
ksmbd_work.c
ksmbd_work.h
Makefile
misc.c
misc.h
ndr.c
ndr.h
nterr.h
ntlmssp.h
oplock.c ksmbd: fix out-of-bound read in parse_lease_state() 2023-06-02 12:30:57 -05:00
oplock.h
server.c ksmbd: validate session id and tree id in the compound request 2023-06-16 21:04:51 -05:00
server.h
smb2misc.c ksmbd: fix out-of-bound read in smb2_write 2023-06-16 21:04:36 -05:00
smb2ops.c
smb2pdu.c ksmbd: validate session id and tree id in compound request 2023-07-23 10:25:11 -05:00
smb2pdu.h
smb_common.c ksmbd: avoid field overflow warning 2023-06-28 22:58:28 -05:00
smb_common.h ksmbd: Replace one-element array with flexible-array member 2023-06-26 00:07:04 -05:00
smbacl.c ksmbd: Replace the ternary conditional operator with min() 2023-06-26 00:07:04 -05:00
smbacl.h
smbfsctl.h
smbstatus.h
transport_ipc.c ksmbd: use kvzalloc instead of kvmalloc 2023-06-26 00:07:04 -05:00
transport_ipc.h
transport_rdma.c
transport_rdma.h
transport_tcp.c
transport_tcp.h
unicode.c
unicode.h
uniupr.h
vfs_cache.c ksmbd: add mnt_want_write to ksmbd vfs functions 2023-06-16 21:04:19 -05:00
vfs_cache.h
vfs.c ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
vfs.h ksmbd: check if a mount point is crossed during path lookup 2023-07-23 10:25:11 -05:00
xattr.h