Dan Carpenter 2d3631960d cifs: prevent integer overflow in nxt_dir_entry() ... commit 8ad8aa353524d89fa2e09522f3078166ff78ec42 upstream. The "old_entry + le32_to_cpu(pDirInfo->NextEntryOffset)" can wrap around so I have added a check for integer overflow. Reported-by: Dr Silvio Cesare of InfoSect <silvio.cesare@gmail.com> Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com> Reviewed-by: Aurelien Aptel <aaptel@suse.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Steve French <stfrench@microsoft.com> CC: Stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-09-26 08:35:08 +02:00
..
asn1.c
cache.c
cifs_debug.c	smb3: fix reset of bytes read and written stats	2018-09-15 09:40:39 +02:00
cifs_debug.h	lib: update single-char callers of strtobool()	2016-10-28 03:01:30 -04:00
cifs_dfs_ref.c
cifs_fs_sb.h	fs/cifs: make share unaccessible at root level mountable	2016-08-20 18:09:20 +02:00
cifs_ioctl.h
cifs_spnego.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
cifs_spnego.h
cifs_unicode.c	CIFS: add misssing SFM mapping for doublequote	2017-05-20 14:27:01 +02:00
cifs_unicode.h	CIFS: add misssing SFM mapping for doublequote	2017-05-20 14:27:01 +02:00
cifs_uniupr.h
cifsacl.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
cifsacl.h
cifsencrypt.c	CIFS: zero sensitive data when freeing	2018-02-16 20:09:39 +01:00
cifsfs.c	SMB3: GUIDs should be constructed as random but valid uuids	2016-10-28 03:01:32 -04:00
cifsfs.h	Fix cifs_uniqueid_to_ino_t() function for s390x	2016-03-09 15:34:50 -08:00
cifsglob.h	CIFS: Reconnect expired SMB sessions	2017-10-18 09:20:40 +02:00
cifspdu.h
cifsproto.h	CIFS: Fix a possible memory corruption during reconnect	2017-01-06 11:16:15 +01:00
cifssmb.c	cifs: Fix infinite loop when using hard mount option	2018-07-11 16:03:48 +02:00
connect.c	CIFS: zero sensitive data when freeing	2018-02-16 20:09:39 +01:00
dir.c	cifs: do not allow creating sockets except with SMB1 posix exensions	2018-04-29 07:50:01 +02:00
dns_resolve.c
dns_resolve.h
export.c
file.c	CIFS: silence lockdep splat in cifs_relock_file()	2018-04-13 19:50:03 +02:00
fscache.c
fscache.h
inode.c	smb3: Do not send SMB3 SET_INFO if nothing changed	2018-09-05 09:18:37 +02:00
ioctl.c	cifs: fix CIFS_IOC_GET_MNT_INFO oops	2017-05-20 14:27:01 +02:00
Kconfig
link.c	smb3: don't request leases in symlink creation and query	2018-09-05 09:18:37 +02:00
Makefile
misc.c	CIFS: zero sensitive data when freeing	2018-02-16 20:09:39 +01:00
netmisc.c	cifs: small underflow in cnvrtDosUnixTm()	2018-03-24 10:58:46 +01:00
nterr.c
nterr.h
ntlmssp.h	cifs: dynamic allocation of ntlmssp blob	2016-07-27 09:47:39 -07:00
readdir.c	cifs: prevent integer overflow in nxt_dir_entry()	2018-09-26 08:35:08 +02:00
rfc1002pdu.h
sess.c	cifs: check kmalloc before use	2018-09-05 09:18:37 +02:00
smb1ops.c	CIFS: Improve readdir verbosity	2017-06-29 12:48:51 +02:00
smb2file.c	CIFS: Fix a possible memory corruption in push locks	2017-01-06 11:16:16 +01:00
smb2glob.h	cifs: Limit the overall credit acquired	2016-10-28 03:01:32 -04:00
smb2inode.c	smb3: Do not send SMB3 SET_INFO if nothing changed	2018-09-05 09:18:37 +02:00
smb2maperror.c
smb2misc.c	cifs: check if SMB2 PDU size has been padded and suppress the warning	2018-09-15 09:40:37 +02:00
smb2ops.c	CIFS: Reconnect expired SMB sessions	2017-10-18 09:20:40 +02:00
smb2pdu.c	SMB3: Number of requests sent should be displayed for SMB3 not just CIFS	2018-09-15 09:40:39 +02:00
smb2pdu.h	CIFS: Fix maximum SMB2 header size	2017-09-07 08:34:09 +02:00
smb2proto.h	Handle mismatched open calls	2017-05-08 07:46:01 +02:00
smb2status.h
smb2transport.c	Handle mismatched open calls	2017-05-08 07:46:01 +02:00
smbencrypt.c
smberr.h
smbfsctl.h	[SMB3] Send durable handle v2 contexts when use of persistent handles required	2015-11-03 09:26:27 -06:00
transport.c	Handle mismatched open calls	2017-05-08 07:46:01 +02:00
winucase.c
xattr.c