Re: [PATCH] smb: client: fix overflow in passthrough ioctl bounds check
Markus Elfring <[email protected]> Wed, 8 Jul 2026 16:42:32 +0200
| Newsgroups | gmane.linux.kernel,gmane.linux.kernel.cifs,gmane.network.samba.internals |
|---|---|
| Message-ID | <[email protected]> |
> smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload
> before copying it to userspace.
=E2=80=A6
> Use size_add() for the offset plus length check so overflow is treated a=
s
> out of bounds.
>=20
> Fixes: 2b1116bbe898 ("CIFS: Use common error handling code in smb2_ioctl=
_query_info()")
Were implementation details improvable already before this commit?
Regards,
Markus