Stefan Metzmacher e1868ba37f ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size ...

This is inspired by the check for data_offset + data_length.

Cc: Steve French <smfrench@gmail.com>
Cc: Tom Talpey <tom@talpey.com>
Cc: linux-cifs@vger.kernel.org
Cc: samba-technical@lists.samba.org
Cc: stable@vger.kernel.org
Fixes: 2ea086e35c ("ksmbd: add buffer validation for smb direct")
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Steve French <stfrench@microsoft.com>

2025-09-14 22:17:10 -05:00

..

mgmt

ksmbd: fix use-after-free in ksmbd_session_rpc_open

2025-04-22 20:45:43 -05:00

asn1.c

ksmbd: use __GFP_RETRY_MAYFAIL

2024-11-25 18:58:02 -06:00

asn1.h

…

auth.c

ksmbd: use SHA-256 library API instead of crypto_shash API

2025-05-25 22:54:50 -05:00

auth.h

ksmbd: use SHA-256 library API instead of crypto_shash API

2025-05-25 22:54:50 -05:00

connection.c

smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()

2025-08-17 18:23:22 -05:00

connection.h

ksmbd: extend the connection limiting mechanism to support IPv6

2025-08-17 18:23:22 -05:00

crypto_ctx.c

ksmbd: use SHA-256 library API instead of crypto_shash API

2025-05-25 22:54:50 -05:00

crypto_ctx.h

ksmbd: use SHA-256 library API instead of crypto_shash API

2025-05-25 22:54:50 -05:00

glob.h

ksmbd: use __GFP_RETRY_MAYFAIL

2024-11-25 18:58:02 -06:00

Kconfig

ksmbd: use SHA-256 library API instead of crypto_shash API

2025-05-25 22:54:50 -05:00

ksmbd_netlink.h

ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

2025-01-15 23:24:51 -06:00

ksmbd_spnego_negtokeninit.asn1

…

ksmbd_spnego_negtokentarg.asn1

…

ksmbd_work.c

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-03-10 12:54:28 -05:00

ksmbd_work.h

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-03-10 12:54:28 -05:00

Makefile

…

misc.c

ksmbd: use __GFP_RETRY_MAYFAIL

2024-11-25 18:58:02 -06:00

misc.h

…

ndr.c

ksmbd: use __GFP_RETRY_MAYFAIL

2024-11-25 18:58:02 -06:00

ndr.h

…

nterr.h

…

ntlmssp.h

…

oplock.c

ksmbd: fix refcount leak causing resource not released

2025-08-17 19:33:29 -05:00

oplock.h

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

2025-04-14 22:21:26 -05:00

server.c

ksmbd: remove unnecessary softdep on crc32

2025-05-25 22:54:50 -05:00

server.h

ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

2025-01-15 23:24:51 -06:00

smb2misc.c

…

smb2ops.c

…

smb2pdu.c

ksmbd: allow a filename to contain colons on SMB3.1.1 posix extensions

2025-08-31 17:48:38 -05:00

smb2pdu.h

ksmbd: provide zero as a unique ID to the Mac client

2025-05-27 10:25:12 -05:00

smb_common.c

smb: server: Fix extension string in ksmbd_extract_shortname()

2025-08-07 18:23:12 -05:00

smb_common.h

smb3: Add defines for two new FileSystemAttributes

2025-04-09 23:42:16 -05:00

smbacl.c

ksmbd: validate zero num_subauth before sub_auth is accessed

2025-04-01 00:04:21 -05:00

smbacl.h

smb: common: change the data type of num_aces to le16

2025-03-02 22:50:54 -06:00

smbfsctl.h

…

transport_ipc.c

ksmbd: Prevent integer overflow in calculation of deadtime

2025-04-14 22:21:26 -05:00

transport_ipc.h

ksmbd: Remove unused functions

2025-01-15 23:24:51 -06:00

transport_rdma.c

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2025-09-14 22:17:10 -05:00

transport_rdma.h

smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()

2025-08-17 18:23:22 -05:00

transport_tcp.c

ksmbd: extend the connection limiting mechanism to support IPv6

2025-08-17 18:23:22 -05:00

transport_tcp.h

ksmbd: fix use-after-free in __smb2_lease_break_noti()

2025-04-14 22:21:26 -05:00

unicode.c

ksmbd: use __GFP_RETRY_MAYFAIL

2024-11-25 18:58:02 -06:00

unicode.h

…

vfs_cache.c

ksmbd: Fix UAF in __close_file_table_ids

2025-05-06 08:37:02 -05:00

vfs_cache.h

ksmbd: allow a filename to contain colons on SMB3.1.1 posix extensions

2025-08-31 17:48:38 -05:00

vfs.c

Merge tag 'v6.17-rc-smb3-server-fixes' of git://git.samba.org/ksmbd

2025-07-28 16:25:24 -07:00

vfs.h

smb/server: add ksmbd_vfs_kern_path()

2025-07-24 10:59:18 -05:00

xattr.h

…