mirror of
https://github.com/torvalds/linux.git
synced 2026-11-06 21:58:01 +01:00
36aad21d50
response padding to prevent buffer overflows and out-of-bounds reads.
- Allocate sufficient space for UTF-16 directory-name conversion,
including the terminating NUL.
- Fix an RDMA transfer length underflow that can cause out-of-bounds
reads or writes when processing multiple remote buffer descriptors.
- Fix use-after-free bugs during failed durable reconnect cleanup and
AppInstanceId supersede racing with session teardown.
- Keep retry timeout clamp bounds constant to fix a MIPS build
failure with CONFIG_HZ=1024.
- Fix a session reference leak in compounded SESSION_SETUP and reject
compounded session binding to avoid mixing session and tree state
after a failed binding.
- Serialize operations on each named pipe and preserve unread RPC reply
data for subsequent READ requests when the client's output buffer is
too small.
- Return complete, eight-byte-aligned stream information entries and
report insufficient output space correctly.
- Use the resolved share root path so shares rooted at mount points
list their contents correctly with crossmnt disabled.
- Ignore network-device events outside the initial network namespace,
preventing container interfaces from affecting ksmbd listeners.
-----BEGIN PGP SIGNATURE-----
iQJKBAABCgA0FiEE6NzKS6Uv/XAAGHgyZwv7A1FEIQgFAmrlQlAWHGxpbmtpbmpl
b25Aa2VybmVsLm9yZwAKCRBnC/sDUUQhCAcOD/oDMuYg1Kz1A4gZyPAR908u2ID1
aJT8fUUcmcwKjFjhm9bvaexfI19wzxVFdqf5j/c6kNNmd5bi3ke8BOc4Z/XjdlEy
38uOyv50Kft2tHp4pVQKwYa4w1tCIBfDJkUVIDsdE1lqfo/fdJYJViE4ZTXbiPiO
LJeOjt+MFLHoBL2RIkH6Be971oh05DDA/+vcWWN5pXwnrQEnGKXa6EPx4EBd068x
EcF2nUJStnqzWxXL4cFsdOnYfaabCbDH8ZZKVDX1JVngcuY5LQ1h+AV/Id/162w8
w1MmCCZYqCLAvTx7j5xV2l6IF3NFet/gx0WIw5QrEviPVr8GHJPA8KCV9o888ZZN
fL8Nbu86gwRpzQUDcWR6EjYsJmB+c6St0yu7U1qnioafDI7/eV8HfJqukUKQVWeV
KuLNjOZIW9PBg/AGT0s21YGsKKFFjYzuDv20eQfWAFPVqELg+njstpvGximYsYMW
SZwatErvzHuq/0ckeh6P9vF1ppu1V0fmowh3fH2B9+/x6Fr5d2+rIlEzO0D9tXdB
jNYxpPoxhSZmM+g9FiwinZSXwAhPVd4UQsTmZXP6LkKO3/UrVXUaMz01qfCG3MBx
iid8qVy1uGdj3/tDN1NnEzvmxGfAo7YAsGwDE+VdRLg3KEA9T/vR1GSLN8ULBu1c
TsoTusgp5Cior9rajg==
=4Znd
-----END PGP SIGNATURE-----
Merge tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb
Pull smb server fixes from Namjae Jeon:
- Fix compound CREATE response buffer sizing and reserve space for
final response padding to prevent buffer overflows and out-of-bounds
reads
- Allocate sufficient space for UTF-16 directory-name conversion,
including the terminating NUL
- Fix an RDMA transfer length underflow that can cause out-of-bounds
reads or writes when processing multiple remote buffer descriptors
- Fix use-after-free bugs during failed durable reconnect cleanup and
AppInstanceId supersede racing with session teardown
- Keep retry timeout clamp bounds constant to fix a MIPS build failure
with CONFIG_HZ=1024
- Fix a session reference leak in compounded SESSION_SETUP and reject
compounded session binding to avoid mixing session and tree state
after a failed binding
- Serialize operations on each named pipe and preserve unread RPC reply
data for subsequent READ requests when the client's output buffer is
too small
- Return complete, eight-byte-aligned stream information entries and
report insufficient output space correctly
- Use the resolved share root path so shares rooted at mount points
list their contents correctly with crossmnt disabled
- Ignore network-device events outside the initial network namespace,
preventing container interfaces from affecting ksmbd listeners
* tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb:
ksmbd: return complete and aligned stream information
ksmbd: fix session reference leak on compounded SESSION_SETUP
ksmbd: fix named-pipe reply loss with small output buffers
ksmbd: avoid races between named-pipe operations
ksmbd: fix use-after-free after a failed durable reconnect
ksmbd: fix out-of-bounds read when padding the final compound response
ksmbd: fix SMB2 CREATE response buffer overflow in compound requests
ksmbd: use the resolved share path for the share root
ksmbd: keep retry timeout clamp bounds constant
smb: server: size directory name conversion buffer correctly
ksmbd: prevent session binding in compound requests
ksmbd: ignore network devices of other namespaces
ksmbd: fix app-instance non-durable supersede session UAF
smb: smbdirect: fix buffer length underflow in RDMA transfers
|
||
|---|---|---|
| .. | ||
| client | ||
| common | ||
| server | ||
| smbdirect | ||
| Kconfig | ||
| Makefile | ||