Namjae Jeon 33a9657d67 ksmbd: limit pdu length size according to connection status ...

commit 62c487b53a upstream.

Stream protocol length will never be larger than 16KB until session setup.
After session setup, the size of requests will not be larger than
16KB + SMB2 MAX WRITE size. This patch limits these invalidly oversized
requests and closes the connection immediately.

Fixes: 0626e6641f ("cifsd: add server handler for central processing and tranport layers")
Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-18259
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-02-01 08:27:24 +01:00

..

mgmt

ksmbd: Fix resource leak in ksmbd_session_rpc_open()

2022-12-31 13:14:31 +01:00

asn1.c

…

asn1.h

…

auth.c

ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob

2023-01-12 11:59:19 +01:00

auth.h

…

connection.c

ksmbd: limit pdu length size according to connection status

2023-02-01 08:27:24 +01:00

connection.h

…

crypto_ctx.c

…

crypto_ctx.h

…

glob.h

…

Kconfig

…

ksmbd_netlink.h

ksmbd: add max connections parameter

2023-02-01 08:27:24 +01:00

ksmbd_spnego_negtokeninit.asn1

…

ksmbd_spnego_negtokentarg.asn1

…

ksmbd_work.c

…

ksmbd_work.h

…

Makefile

…

misc.c

…

misc.h

…

ndr.c

ksmbd: downgrade ndr version error message to debug

2023-02-01 08:27:24 +01:00

ndr.h

…

nterr.h

…

ntlmssp.h

…

oplock.c

…

oplock.h

…

server.c

…

server.h

ksmbd: add max connections parameter

2023-02-01 08:27:24 +01:00

smb2misc.c

…

smb2ops.c

…

smb2pdu.c

ksmbd: do not sign response to session request for guest login

2023-02-01 08:27:24 +01:00

smb2pdu.h

ksmbd: limit pdu length size according to connection status

2023-02-01 08:27:24 +01:00

smb_common.c

…

smb_common.h

…

smbacl.c

…

smbacl.h

…

smbfsctl.h

…

smbstatus.h

…

transport_ipc.c

ksmbd: add max connections parameter

2023-02-01 08:27:24 +01:00

transport_ipc.h

…

transport_rdma.c

ksmbd: add smbd max io size parameter

2023-02-01 08:27:24 +01:00

transport_rdma.h

ksmbd: add smbd max io size parameter

2023-02-01 08:27:24 +01:00

transport_tcp.c

ksmbd: add max connections parameter

2023-02-01 08:27:24 +01:00

transport_tcp.h

…

unicode.c

…

unicode.h

…

uniupr.h

…

vfs_cache.c

…

vfs_cache.h

…

vfs.c

…

vfs.h

…

xattr.h

…