android_kernel_oneplus_msm8998/fs/cifs
Pavel Shilovsky adc58bfd4d CIFS: Fix a possible invalid memory access in smb2_query_symlink()
commit 7893242e2465aea6f2cbc2639da8fa5ce96e8cc2 upstream.

During following a symbolic link we received err_buf from SMB2_open().
While the validity of SMB2 error response is checked previously
in smb2_check_message() a symbolic link payload is not checked at all.
Fix it by adding such checks.

Cc: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pavel Shilovsky <pshilovsky@samba.org>
Signed-off-by: Steve French <smfrench@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-08-20 18:09:20 +02:00
..
asn1.c
cache.c
cifs_debug.c cifs: Ratelimit kernel log messages 2016-02-25 12:01:17 -08:00
cifs_debug.h cifs: Ratelimit kernel log messages 2016-02-25 12:01:17 -08:00
cifs_dfs_ref.c Fix that several functions handle incorrect value of mapchars 2015-05-10 19:56:35 -05:00
cifs_fs_sb.h fs/cifs: make share unaccessible at root level mountable 2016-08-20 18:09:20 +02:00
cifs_ioctl.h Add way to query server fs info for smb3 2015-08-20 10:19:25 -05:00
cifs_spnego.c KEYS: Merge the type-specific data with the payload data 2015-10-21 15:18:36 +01:00
cifs_spnego.h
cifs_unicode.c File names with trailing period or space need special case conversion 2016-07-27 09:47:39 -07:00
cifs_unicode.h File names with trailing period or space need special case conversion 2016-07-27 09:47:39 -07:00
cifs_uniupr.h
cifsacl.c KEYS: Merge the type-specific data with the payload data 2015-10-21 15:18:36 +01:00
cifsacl.h
cifsencrypt.c cifs: fix crash due to race in hmac(md5) handling 2016-08-20 18:09:20 +02:00
cifsfs.c fs/cifs: make share unaccessible at root level mountable 2016-08-20 18:09:20 +02:00
cifsfs.h Fix cifs_uniqueid_to_ino_t() function for s390x 2016-03-09 15:34:50 -08:00
cifsglob.h Add resilienthandles mount parm 2015-11-03 10:10:36 -06:00
cifspdu.h Add way to query server fs info for smb3 2015-08-20 10:19:25 -05:00
cifsproto.h Fix that several functions handle incorrect value of mapchars 2015-05-10 19:56:35 -05:00
cifssmb.c CIFS: Fix SMB2+ interim response processing for read requests 2016-03-09 15:34:50 -08:00
connect.c fs/cifs: make share unaccessible at root level mountable 2016-08-20 18:09:20 +02:00
dir.c cifs: Check for existing directory when opening file with O_CREAT 2016-08-20 18:09:20 +02:00
dns_resolve.c
dns_resolve.h
export.c
file.c mm, fs: introduce mapping_gfp_constraint() 2015-11-06 17:50:42 -08:00
fscache.c
fscache.h
inode.c fs/cifs: make share unaccessible at root level mountable 2016-08-20 18:09:20 +02:00
ioctl.c Allow copy offload (CopyChunk) across shares 2015-11-09 09:28:48 -06:00
Kconfig Allow parsing vers=3.11 on cifs mount 2015-06-27 20:23:32 -07:00
link.c Merge branch 'for-linus-1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2015-06-22 12:51:21 -07:00
Makefile
misc.c VFS: normal filesystems (and lustre): d_inode() annotations 2015-04-15 15:06:57 -04:00
netmisc.c Fix signed/unsigned pointer warning 2014-12-14 14:55:57 -06:00
nterr.c
nterr.h
ntlmssp.h cifs: dynamic allocation of ntlmssp blob 2016-07-27 09:47:39 -07:00
readdir.c cifs_dbg() outputs an uninitialized buffer in cifs_readdir() 2016-02-25 12:01:17 -08:00
rfc1002pdu.h
sess.c cifs: dynamic allocation of ntlmssp blob 2016-07-27 09:47:39 -07:00
smb1ops.c Fix that several functions handle incorrect value of mapchars 2015-05-10 19:56:35 -05:00
smb2file.c Add resilienthandles mount parm 2015-11-03 10:10:36 -06:00
smb2glob.h remove directory incorrectly tries to set delete on close on non-empty directories 2016-06-01 12:15:48 -07:00
smb2inode.c remove directory incorrectly tries to set delete on close on non-empty directories 2016-06-01 12:15:48 -07:00
smb2maperror.c Fix problem recognizing symlinks 2014-10-02 14:10:04 -05:00
smb2misc.c VFS: normal filesystems (and lustre): d_inode() annotations 2015-04-15 15:06:57 -04:00
smb2ops.c CIFS: Fix a possible invalid memory access in smb2_query_symlink() 2016-08-20 18:09:20 +02:00
smb2pdu.c cifs: dynamic allocation of ntlmssp blob 2016-07-27 09:47:39 -07:00
smb2pdu.h [SMB3] Send durable handle v2 contexts when use of persistent handles required 2015-11-03 09:26:27 -06:00
smb2proto.h remove directory incorrectly tries to set delete on close on non-empty directories 2016-06-01 12:15:48 -07:00
smb2status.h
smb2transport.c Convert MessageID in smb2_hdr to LE 2014-12-14 14:55:45 -06:00
smbencrypt.c cifs: use memzero_explicit to clear stack buffer 2015-01-19 15:32:13 -06:00
smberr.h
smbfsctl.h [SMB3] Send durable handle v2 contexts when use of persistent handles required 2015-11-03 09:26:27 -06:00
transport.c cifs: fix race between call_async() and reconnect() 2016-02-25 12:01:17 -08:00
winucase.c
xattr.c VFS: normal filesystems (and lustre): d_inode() annotations 2015-04-15 15:06:57 -04:00