cifs: For SMB2 security informaion query, check for minimum sized security descriptor...
authorShirish Pargaonkar <shirishpargaonkar@gmail.com>
Mon, 4 Jun 2018 11:46:22 +0000 (06:46 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Jun 2018 23:54:00 +0000 (07:54 +0800)
commit335136d2e26e9d09a73c9bad315f9075a7a8557f
treeca98876a4cd129c7f41787e2a264e3f1589f4fb7
parenta87867792794411e98a95322fa6a9d584bbbd5e1
cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class

commit ee25c6dd7b05113783ce1f4fab6b30fc00d29b8d upstream.

Validate_buf () function checks for an expected minimum sized response
passed to query_info() function.
For security information, the size of a security descriptor can be
smaller (one subauthority, no ACEs) than the size of the structure
that defines FileInfoClass of FileAllInformation.

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=199725
Cc: <stable@vger.kernel.org>
Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
Reviewed-by: Noah Morrison <noah.morrison@rubrik.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/cifs/cifsacl.h
fs/cifs/smb2pdu.c