Re: [PATCH] smb: client: set SB_I_NODEV to prevent device node injection
"Manthey, Norbert" <[email protected]> Tue, 14 Jul 2026 16:23:07 +0000
| Newsgroups | gmane.linux.file-systems,gmane.linux.kernel.cifs,gmane.linux.kernel,gmane.network.samba.internals,gmane.linux.kernel.stable |
|---|---|
| Message-ID | <FR5P281MB509177A7DE157E6D72EC05B3CFFD2@FR5P281MB5091.DEUP281.PROD.OUTLOOK.COM> |
SGkgU3RldmUsCgpUaGUgaXNzdWUgaXMgdGhhdCB0aGUgY2xpZW50IHRha2VzIHRoZSBkZXZpY2Ug bm9kZSdzIG1vZGUgc3RyYWlnaHQKZnJvbSB0aGUgc2VydmVyLiBTbyBhIG1hbGljaW91cy9jb21w cm9taXNlZCBTTUIgc2VydmVyIGNhbiBkZWZpbmUgYQpkZXZpY2Ugbm9kZSAodHlwZSArIG1ham9y L21pbm9yICsgcGVybWlzc2lvbnMpIG9uIHRoZSBjbGllbnQgdGhhdCB0aGUKYWRtaW4gbmV2ZXIg Y3JlYXRlZCBhbmQgY2Fubm90IG90aGVyd2lzZSBjb25zdHJhaW4gLS0gdGhlIG9ubHkga25vYgps ZWZ0IHRvIGJsb2NrIGl0IGlzIHRoZSAibm9kZXYiIG1vdW50IG9wdGlvbi4gVGhhdCdzIHdoeSB3 ZSBpbnRyb2R1Y2UKdGhlIGNoYW5nZSB1c2luZyBTQl9JX05PREVWIGhlcmUuCgpXZSBkaWQgYW5h bHl6ZSB0aGUgQ0lGUyBjb2RlLCBhbmQgZm91bmQgdGhpcyBtaXNzaW5nIHNlY3VyaXR5IGNoZWNr cy4KV2UgaGF2ZSBhIHJlcHJvZHVjZXIgdGhhdCBhbGxvd3MgYSBtYWxpY2lvdXMgc2VydmVyIGFu ZCBsb2NhbCB1c2VyIHRvCmVsZXZhdGUgcHJpdmlsZWdlcyBieSBpbnRyb2R1Y2luZyBhIG5ldyBk ZXZpY2UgaW4gdGhlIG1vdW50LgoKQmVzdCwKTm9yYmVydAoKX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpGcm9tOiBTdGV2ZSBGcmVuY2ggPHNtZnJlbmNoQGdtYWlsLmNv bT4KU2VudDogVGh1cnNkYXksIEp1bHkgOSwgMjAyNiA3OjIwIFBNClRvOiBEb2ViZWwsIEJqb2Vy biA8ZG9lYmVsQGFtYXpvbi5kZT4KQ2M6IFBhdWxvIEFsY2FudGFyYSA8cGNAbWFuZ3VlYml0Lm9y Zz47IFJvbm5pZSBTYWhsYmVyZyA8cm9ubmllc2FobGJlcmdAZ21haWwuY29tPjsgU2h5YW0gUHJh c2FkIE4gPHNwcmFzYWRAbWljcm9zb2Z0LmNvbT47IFRvbSBUYWxwZXkgPHRvbUB0YWxwZXkuY29t PjsgQmhhcmF0aCBTTSA8YmhhcmF0aHNtQG1pY3Jvc29mdC5jb20+OyBsaW51eC1jaWZzQHZnZXIu a2VybmVsLm9yZyA8bGludXgtY2lmc0B2Z2VyLmtlcm5lbC5vcmc+OyBsaW51eC1rZXJuZWxAdmdl ci5rZXJuZWwub3JnIDxsaW51eC1rZXJuZWxAdmdlci5rZXJuZWwub3JnPjsgc2FtYmEtdGVjaG5p Y2FsQGxpc3RzLnNhbWJhLm9yZyA8c2FtYmEtdGVjaG5pY2FsQGxpc3RzLnNhbWJhLm9yZz47IHN0 YWJsZUB2Z2VyLmtlcm5lbC5vcmcgPHN0YWJsZUB2Z2VyLmtlcm5lbC5vcmc+OyBNYW50aGV5LCBO b3JiZXJ0IDxubWFudGhleUBhbWF6b24uZGU+OyBsaW51eC1mc2RldmVsIDxsaW51eC1mc2RldmVs QHZnZXIua2VybmVsLm9yZz4KU3ViamVjdDogUkU6IFtFWFRFUk5BTF0gW1BBVENIXSBzbWI6IGNs aWVudDogc2V0IFNCX0lfTk9ERVYgdG8gcHJldmVudCBkZXZpY2Ugbm9kZSBpbmplY3Rpb24KwqAK Q0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5p emF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91 IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4KCgoK U2V0dGluZyBTQl9JX05PREVWIGlzIGFwcGFyZW50bHkgbm90IGRvbmUgZm9yIGFueSByZW1vdGUg ZmlsZXN5c3RlbXMsCmFuZCBBSSBzZWFyY2ggY29uZmlybWVkIHRoYXQgaXQgcHJvYmFibHkgaXNu J3QgYSBnb29kIGlkZWEgdG8gc2V0IGl0CmZvciByZW1vdGUgZnMuwqAgSXQgaXMgbW9yZSBvZiBh IHRoaW5nIGluIHBzZXVkb2ZpbGVzeXN0ZW1zIGFuZCBub3QKbmVlZGVkIGZvciBuZXR3b3JrIGZp bGVzeXN0ZW1zLgoKZS5nLgoKIklzIHRoZXJlIGFueSBiZW5lZml0IHRvIHNldHRpbmcgU0JfSV9O T0RFVj8KClRvZGF5LCBwcm9iYWJseSBub3QuSWYgeW91IGdyZXAgdGhlIGtlcm5lbCwgeW91J2xs IGZpbmQgU0JfSV9OT0RFViBpcwp1c2VkIGluIG9ubHkgYSBoYW5kZnVsIG9mIHBsYWNlcywgYW5k IHRob3NlIHBsYWNlcyBnZW5lcmFsbHkgaW52b2x2ZQpwc2V1ZG8tZmlsZXN5c3RlbXMgb3IgaW50 ZXJuYWwgVkZTIGFzc3VtcHRpb25zIHJhdGhlciB0aGFuIHJlbW90ZQpzdG9yYWdlLsKgIFNldHRp bmcgaXQgb24gQ0lGUyBvciBORlMgaXMgdW5saWtlbHkgdG8gY2hhbmdlIGJlaGF2aW9yLApiZWNh dXNlIHRob3NlIGZpbGVzeXN0ZW1zIGhhdmUgd29ya2VkIGNvcnJlY3RseSBmb3IgZGVjYWRlcyB3 aXRob3V0Cml0LiBNb3N0IHJlbW90ZSBmaWxlc3lzdGVtcyBkb24ndCBzZXQgc19pZmxhZ3MgYmVj YXVzZSBhbG1vc3Qgbm9uZSBvZgp0aGUgU0JfSV8qIGZsYWdzIGFyZSBpbnRlbmRlZCBhcyBnZW5l cmljIGZpbGVzeXN0ZW0gY2FwYWJpbGl0eSBmbGFncy4KVGhleSdyZSBtb3N0bHkgaW50ZXJuYWwg VkZTIHN0YXRlLCBhbmQgU0JfSV9OT0RFViBpbiBwYXJ0aWN1bGFyIGhhcyBhCnZlcnkgc3BlY2lm aWMgcHVycG9zZS7CoCBTQl9JX05PREVWIGRvZXMgbm90IG1lYW4gInRoaXMgZmlsZXN5c3RlbQpj b250YWlucyBubyBkZXZpY2Ugbm9kZXMuIiBJdCBtZWFucyBzb21ldGhpbmcgY2xvc2VyIHRvOsKg IFRoaXMKc3VwZXJibG9jayBpcyBub3QgYXNzb2NpYXRlZCB3aXRoIGEgYmxvY2sgZGV2aWNlLgpv ciBtb3JlIHByZWNpc2VseTogVGhlIFZGUyBzaG91bGQgbm90IGV4cGVjdCBhIGJhY2tpbmcgc3Ry dWN0CmJsb2NrX2RldmljZSBmb3IgdGhpcyBzdXBlcmJsb2NrLiIKCkhhcyBzb21ldGhpbmcgY2hh bmdlZD/CoCBIb3cgZGlkIHRoaXMgcXVlc3Rpb24gYWJvdXQgU0JfSV9OT0RFViBjb21lIHVwPwoK T24gVGh1LCBKdWwgOSwgMjAyNiBhdCAxMTowNeKAr0FNIEJqb2VybiBEb2ViZWwgPGRvZWJlbEBh bWF6b24uZGU+IHdyb3RlOgo+Cj4gRnJvbTogTm9yYmVydCBNYW50aGV5IDxubWFudGhleUBhbWF6 b24uZGU+Cj4KPiBTZXQgU0JfSV9OT0RFViBvbiB0aGUgc3VwZXJibG9jayBieSBkZWZhdWx0IGZv ciBDSUZTIG1vdW50cy4gVGhpcyBpcwo+IGNvbnNpc3RlbnQgd2l0aCBob3cgb3RoZXIgZmlsZXN5 c3RlbXMgaGFuZGxlIHVudHJ1c3RlZCByZW1vdGUgY29udGVudAo+IGFuZCBwcmV2ZW50cyB0aGUg c2VydmVyIHNpZGUgZnJvbSBpbmplY3RpbmcgZGV2aWNlIG5vZGVzIG9uIHRoZSBjbGllbnQuCj4K PiBGaXhlczogMmU0NTY0YjMxYjY0NSAoInNtYjM6IGFkZCBzdXBwb3J0IGZvciBzdGF0IG9mIFdT TCByZXBhcnNlIHBvaW50cyBmb3Igc3BlY2lhbCBmaWxlIHR5cGVzIikKPiBTaWduZWQtb2ZmLWJ5 OiBOb3JiZXJ0IE1hbnRoZXkgPG5tYW50aGV5QGFtYXpvbi5kZT4KPiBBc3Npc3RlZC1ieTogS2ly bzpjbGF1ZGUtb3B1cy00LjYKPiBDYzogc3RhYmxlQHZnZXIua2VybmVsLm9yZwo+IC0tLQo+wqAg ZnMvc21iL2NsaWVudC9jaWZzZnMuYyB8IDMgKysrCj7CoCAxIGZpbGUgY2hhbmdlZCwgMyBpbnNl cnRpb25zKCspCj4KPiBkaWZmIC0tZ2l0IGEvZnMvc21iL2NsaWVudC9jaWZzZnMuYyBiL2ZzL3Nt Yi9jbGllbnQvY2lmc2ZzLmMKPiBpbmRleCBlYTRmYzBmYTY4Y2FjLi4zNWVlZTJmOTg5OWQ1IDEw MDY0NAo+IC0tLSBhL2ZzL3NtYi9jbGllbnQvY2lmc2ZzLmMKPiArKysgYi9mcy9zbWIvY2xpZW50 L2NpZnNmcy5jCj4gQEAgLTIwOCw2ICsyMDgsOSBAQCBjaWZzX3JlYWRfc3VwZXIoc3RydWN0IHN1 cGVyX2Jsb2NrICpzYikKPsKgwqDCoMKgwqDCoMKgwqAgaWYgKHNiZmxhZ3MgJiBDSUZTX01PVU5U X1BPU0lYQUNMKQo+wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgc2ItPnNfZmxhZ3Mg fD0gU0JfUE9TSVhBQ0w7Cj4KPiArwqDCoMKgwqDCoMKgIC8qIFByZXZlbnQgZGV2aWNlIG5vZGUg b3BlbnMgZnJvbSByZW1vdGUgZmlsZXN5c3RlbSBieSBkZWZhdWx0ICovCj4gK8KgwqDCoMKgwqDC oCBzYi0+c19pZmxhZ3MgfD0gU0JfSV9OT0RFVjsKPiArCj7CoMKgwqDCoMKgwqDCoMKgIGlmICh0 Y29uLT5zbmFwc2hvdF90aW1lKQo+wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgc2It PnNfZmxhZ3MgfD0gU0JfUkRPTkxZOwo+Cj4gLS0KPiAyLjUwLjEKPgo+CgoKLS0KVGhhbmtzLAoK U3RldmU=