Re: [PATCH] smb: client: set SB_I_NODEV to prevent device node injection
"Manthey, Norbert" <[email protected]> Wed, 15 Jul 2026 17:27:45 +0000
| Newsgroups | gmane.linux.kernel.stable,gmane.linux.kernel.cifs,gmane.linux.kernel,gmane.network.samba.internals,gmane.linux.file-systems |
|---|---|
| Message-ID | <FR5P281MB509126A065753950A95D97A2CFF82@FR5P281MB5091.DEUP281.PROD.OUTLOOK.COM> |
VGhpcyBpcyBsaWtlbHkuIFdlIGRpZCBub3QgaW52ZXN0aWdhdGUgdGhlIG90aGVyIGZpbGUgc3lz dGVtcy4gV2UndmUgYmVlbiBsb29raW5nIHNwZWNpZmljYWxseSBpbnRvIENJRlMuIEFzIEkgYW0g bm90IGEgZmlsZSBzeXN0ZW0gZXhwZXJ0LCBJJ2QgYXBwcmVjaWF0ZSBoZWxwIGFuZCBndWlkYW5j ZSBmcm9tIGV4cGVydHMgb24gdGhpcy4KClRoYW5rcywKTm9yYmVydAoKX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXwpGcm9tOiBTdGV2ZSBGcmVuY2ggPHNtZnJlbmNoQGdt YWlsLmNvbT4KU2VudDogVHVlc2RheSwgSnVseSAxNCwgMjAyNiAxMTo0MyBQTQpUbzogTWFudGhl eSwgTm9yYmVydCA8bm1hbnRoZXlAYW1hem9uLmRlPgpDYzogRG9lYmVsLCBCam9lcm4gPGRvZWJl bEBhbWF6b24uZGU+OyBQYXVsbyBBbGNhbnRhcmEgPHBjQG1hbmd1ZWJpdC5vcmc+OyBSb25uaWUg U2FobGJlcmcgPHJvbm5pZXNhaGxiZXJnQGdtYWlsLmNvbT47IFNoeWFtIFByYXNhZCBOIDxzcHJh c2FkQG1pY3Jvc29mdC5jb20+OyBUb20gVGFscGV5IDx0b21AdGFscGV5LmNvbT47IEJoYXJhdGgg U00gPGJoYXJhdGhzbUBtaWNyb3NvZnQuY29tPjsgbGludXgtY2lmc0B2Z2VyLmtlcm5lbC5vcmcg PGxpbnV4LWNpZnNAdmdlci5rZXJuZWwub3JnPjsgbGludXgta2VybmVsQHZnZXIua2VybmVsLm9y ZyA8bGludXgta2VybmVsQHZnZXIua2VybmVsLm9yZz47IHNhbWJhLXRlY2huaWNhbEBsaXN0cy5z YW1iYS5vcmcgPHNhbWJhLXRlY2huaWNhbEBsaXN0cy5zYW1iYS5vcmc+OyBzdGFibGVAdmdlci5r ZXJuZWwub3JnIDxzdGFibGVAdmdlci5rZXJuZWwub3JnPjsgbGludXgtZnNkZXZlbCA8bGludXgt ZnNkZXZlbEB2Z2VyLmtlcm5lbC5vcmc+OyBEYXZpZCBIb3dlbGxzIDxkaG93ZWxsc0ByZWRoYXQu Y29tPgpTdWJqZWN0OiBSRTogW0VYVEVSTkFMXSBbUEFUQ0hdIHNtYjogY2xpZW50OiBzZXQgU0Jf SV9OT0RFViB0byBwcmV2ZW50IGRldmljZSBub2RlIGluamVjdGlvbgrCoApDQVVUSU9OOiBUaGlz IGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5v dCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0g dGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLgoKCgpJZiB0aGlzIGlzIG5l ZWRlZCBmb3IgY2lmcy5rbyB3b3VsZG4ndCB0aGlzIGFsc28gYmUgbmVlZGVkIGZvciBBRlMsCk5G UywgQ0VQSCBhbmQgb3RoZXJzPwoKT24gVHVlLCBKdWwgMTQsIDIwMjYgYXQgMTE6MjPigK9BTSBN YW50aGV5LCBOb3JiZXJ0IDxubWFudGhleUBhbWF6b24uZGU+IHdyb3RlOgo+Cj4gSGkgU3RldmUs Cj4KPiBUaGUgaXNzdWUgaXMgdGhhdCB0aGUgY2xpZW50IHRha2VzIHRoZSBkZXZpY2Ugbm9kZSdz IG1vZGUgc3RyYWlnaHQKPiBmcm9tIHRoZSBzZXJ2ZXIuIFNvIGEgbWFsaWNpb3VzL2NvbXByb21p c2VkIFNNQiBzZXJ2ZXIgY2FuIGRlZmluZSBhCj4gZGV2aWNlIG5vZGUgKHR5cGUgKyBtYWpvci9t aW5vciArIHBlcm1pc3Npb25zKSBvbiB0aGUgY2xpZW50IHRoYXQgdGhlCj4gYWRtaW4gbmV2ZXIg Y3JlYXRlZCBhbmQgY2Fubm90IG90aGVyd2lzZSBjb25zdHJhaW4gLS0gdGhlIG9ubHkga25vYgo+ IGxlZnQgdG8gYmxvY2sgaXQgaXMgdGhlICJub2RldiIgbW91bnQgb3B0aW9uLiBUaGF0J3Mgd2h5 IHdlIGludHJvZHVjZQo+IHRoZSBjaGFuZ2UgdXNpbmcgU0JfSV9OT0RFViBoZXJlLgo+Cj4gV2Ug ZGlkIGFuYWx5emUgdGhlIENJRlMgY29kZSwgYW5kIGZvdW5kIHRoaXMgbWlzc2luZyBzZWN1cml0 eSBjaGVja3MuCj4gV2UgaGF2ZSBhIHJlcHJvZHVjZXIgdGhhdCBhbGxvd3MgYSBtYWxpY2lvdXMg c2VydmVyIGFuZCBsb2NhbCB1c2VyIHRvCj4gZWxldmF0ZSBwcml2aWxlZ2VzIGJ5IGludHJvZHVj aW5nIGEgbmV3IGRldmljZSBpbiB0aGUgbW91bnQuCj4KPiBCZXN0LAo+IE5vcmJlcnQKPgo+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KPiBGcm9tOiBTdGV2ZSBGcmVu Y2ggPHNtZnJlbmNoQGdtYWlsLmNvbT4KPiBTZW50OiBUaHVyc2RheSwgSnVseSA5LCAyMDI2IDc6 MjAgUE0KPiBUbzogRG9lYmVsLCBCam9lcm4gPGRvZWJlbEBhbWF6b24uZGU+Cj4gQ2M6IFBhdWxv IEFsY2FudGFyYSA8cGNAbWFuZ3VlYml0Lm9yZz47IFJvbm5pZSBTYWhsYmVyZyA8cm9ubmllc2Fo bGJlcmdAZ21haWwuY29tPjsgU2h5YW0gUHJhc2FkIE4gPHNwcmFzYWRAbWljcm9zb2Z0LmNvbT47 IFRvbSBUYWxwZXkgPHRvbUB0YWxwZXkuY29tPjsgQmhhcmF0aCBTTSA8YmhhcmF0aHNtQG1pY3Jv c29mdC5jb20+OyBsaW51eC1jaWZzQHZnZXIua2VybmVsLm9yZyA8bGludXgtY2lmc0B2Z2VyLmtl cm5lbC5vcmc+OyBsaW51eC1rZXJuZWxAdmdlci5rZXJuZWwub3JnIDxsaW51eC1rZXJuZWxAdmdl ci5rZXJuZWwub3JnPjsgc2FtYmEtdGVjaG5pY2FsQGxpc3RzLnNhbWJhLm9yZyA8c2FtYmEtdGVj aG5pY2FsQGxpc3RzLnNhbWJhLm9yZz47IHN0YWJsZUB2Z2VyLmtlcm5lbC5vcmcgPHN0YWJsZUB2 Z2VyLmtlcm5lbC5vcmc+OyBNYW50aGV5LCBOb3JiZXJ0IDxubWFudGhleUBhbWF6b24uZGU+OyBs aW51eC1mc2RldmVsIDxsaW51eC1mc2RldmVsQHZnZXIua2VybmVsLm9yZz4KPiBTdWJqZWN0OiBS RTogW0VYVEVSTkFMXSBbUEFUQ0hdIHNtYjogY2xpZW50OiBzZXQgU0JfSV9OT0RFViB0byBwcmV2 ZW50IGRldmljZSBub2RlIGluamVjdGlvbgo+Cj4gQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5h dGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mg b3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5k IGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4KPgo+Cj4KPiBTZXR0aW5nIFNCX0lfTk9ERVYgaXMg YXBwYXJlbnRseSBub3QgZG9uZSBmb3IgYW55IHJlbW90ZSBmaWxlc3lzdGVtcywKPiBhbmQgQUkg c2VhcmNoIGNvbmZpcm1lZCB0aGF0IGl0IHByb2JhYmx5IGlzbid0IGEgZ29vZCBpZGVhIHRvIHNl dCBpdAo+IGZvciByZW1vdGUgZnMuwqAgSXQgaXMgbW9yZSBvZiBhIHRoaW5nIGluIHBzZXVkb2Zp bGVzeXN0ZW1zIGFuZCBub3QKPiBuZWVkZWQgZm9yIG5ldHdvcmsgZmlsZXN5c3RlbXMuCj4KPiBl LmcuCj4KPiAiSXMgdGhlcmUgYW55IGJlbmVmaXQgdG8gc2V0dGluZyBTQl9JX05PREVWPwo+Cj4g VG9kYXksIHByb2JhYmx5IG5vdC5JZiB5b3UgZ3JlcCB0aGUga2VybmVsLCB5b3UnbGwgZmluZCBT Ql9JX05PREVWIGlzCj4gdXNlZCBpbiBvbmx5IGEgaGFuZGZ1bCBvZiBwbGFjZXMsIGFuZCB0aG9z ZSBwbGFjZXMgZ2VuZXJhbGx5IGludm9sdmUKPiBwc2V1ZG8tZmlsZXN5c3RlbXMgb3IgaW50ZXJu YWwgVkZTIGFzc3VtcHRpb25zIHJhdGhlciB0aGFuIHJlbW90ZQo+IHN0b3JhZ2UuwqAgU2V0dGlu ZyBpdCBvbiBDSUZTIG9yIE5GUyBpcyB1bmxpa2VseSB0byBjaGFuZ2UgYmVoYXZpb3IsCj4gYmVj YXVzZSB0aG9zZSBmaWxlc3lzdGVtcyBoYXZlIHdvcmtlZCBjb3JyZWN0bHkgZm9yIGRlY2FkZXMg d2l0aG91dAo+IGl0LiBNb3N0IHJlbW90ZSBmaWxlc3lzdGVtcyBkb24ndCBzZXQgc19pZmxhZ3Mg YmVjYXVzZSBhbG1vc3Qgbm9uZSBvZgo+IHRoZSBTQl9JXyogZmxhZ3MgYXJlIGludGVuZGVkIGFz IGdlbmVyaWMgZmlsZXN5c3RlbSBjYXBhYmlsaXR5IGZsYWdzLgo+IFRoZXkncmUgbW9zdGx5IGlu dGVybmFsIFZGUyBzdGF0ZSwgYW5kIFNCX0lfTk9ERVYgaW4gcGFydGljdWxhciBoYXMgYQo+IHZl cnkgc3BlY2lmaWMgcHVycG9zZS7CoCBTQl9JX05PREVWIGRvZXMgbm90IG1lYW4gInRoaXMgZmls ZXN5c3RlbQo+IGNvbnRhaW5zIG5vIGRldmljZSBub2Rlcy4iIEl0IG1lYW5zIHNvbWV0aGluZyBj bG9zZXIgdG86wqAgVGhpcwo+IHN1cGVyYmxvY2sgaXMgbm90IGFzc29jaWF0ZWQgd2l0aCBhIGJs b2NrIGRldmljZS4KPiBvciBtb3JlIHByZWNpc2VseTogVGhlIFZGUyBzaG91bGQgbm90IGV4cGVj dCBhIGJhY2tpbmcgc3RydWN0Cj4gYmxvY2tfZGV2aWNlIGZvciB0aGlzIHN1cGVyYmxvY2suIgo+ Cj4gSGFzIHNvbWV0aGluZyBjaGFuZ2VkP8KgIEhvdyBkaWQgdGhpcyBxdWVzdGlvbiBhYm91dCBT Ql9JX05PREVWIGNvbWUgdXA/Cj4KPiBPbiBUaHUsIEp1bCA5LCAyMDI2IGF0IDExOjA14oCvQU0g QmpvZXJuIERvZWJlbCA8ZG9lYmVsQGFtYXpvbi5kZT4gd3JvdGU6Cj4gPgo+ID4gRnJvbTogTm9y YmVydCBNYW50aGV5IDxubWFudGhleUBhbWF6b24uZGU+Cj4gPgo+ID4gU2V0IFNCX0lfTk9ERVYg b24gdGhlIHN1cGVyYmxvY2sgYnkgZGVmYXVsdCBmb3IgQ0lGUyBtb3VudHMuIFRoaXMgaXMKPiA+ IGNvbnNpc3RlbnQgd2l0aCBob3cgb3RoZXIgZmlsZXN5c3RlbXMgaGFuZGxlIHVudHJ1c3RlZCBy ZW1vdGUgY29udGVudAo+ID4gYW5kIHByZXZlbnRzIHRoZSBzZXJ2ZXIgc2lkZSBmcm9tIGluamVj dGluZyBkZXZpY2Ugbm9kZXMgb24gdGhlIGNsaWVudC4KPiA+Cj4gPiBGaXhlczogMmU0NTY0YjMx YjY0NSAoInNtYjM6IGFkZCBzdXBwb3J0IGZvciBzdGF0IG9mIFdTTCByZXBhcnNlIHBvaW50cyBm b3Igc3BlY2lhbCBmaWxlIHR5cGVzIikKPiA+IFNpZ25lZC1vZmYtYnk6IE5vcmJlcnQgTWFudGhl eSA8bm1hbnRoZXlAYW1hem9uLmRlPgo+ID4gQXNzaXN0ZWQtYnk6IEtpcm86Y2xhdWRlLW9wdXMt NC42Cj4gPiBDYzogc3RhYmxlQHZnZXIua2VybmVsLm9yZwo+ID4gLS0tCj4gPsKgIGZzL3NtYi9j bGllbnQvY2lmc2ZzLmMgfCAzICsrKwo+ID7CoCAxIGZpbGUgY2hhbmdlZCwgMyBpbnNlcnRpb25z KCspCj4gPgo+ID4gZGlmZiAtLWdpdCBhL2ZzL3NtYi9jbGllbnQvY2lmc2ZzLmMgYi9mcy9zbWIv Y2xpZW50L2NpZnNmcy5jCj4gPiBpbmRleCBlYTRmYzBmYTY4Y2FjLi4zNWVlZTJmOTg5OWQ1IDEw MDY0NAo+ID4gLS0tIGEvZnMvc21iL2NsaWVudC9jaWZzZnMuYwo+ID4gKysrIGIvZnMvc21iL2Ns aWVudC9jaWZzZnMuYwo+ID4gQEAgLTIwOCw2ICsyMDgsOSBAQCBjaWZzX3JlYWRfc3VwZXIoc3Ry dWN0IHN1cGVyX2Jsb2NrICpzYikKPiA+wqDCoMKgwqDCoMKgwqDCoCBpZiAoc2JmbGFncyAmIENJ RlNfTU9VTlRfUE9TSVhBQ0wpCj4gPsKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHNi LT5zX2ZsYWdzIHw9IFNCX1BPU0lYQUNMOwo+ID4KPiA+ICvCoMKgwqDCoMKgwqAgLyogUHJldmVu dCBkZXZpY2Ugbm9kZSBvcGVucyBmcm9tIHJlbW90ZSBmaWxlc3lzdGVtIGJ5IGRlZmF1bHQgKi8K PiA+ICvCoMKgwqDCoMKgwqAgc2ItPnNfaWZsYWdzIHw9IFNCX0lfTk9ERVY7Cj4gPiArCj4gPsKg wqDCoMKgwqDCoMKgwqAgaWYgKHRjb24tPnNuYXBzaG90X3RpbWUpCj4gPsKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgIHNiLT5zX2ZsYWdzIHw9IFNCX1JET05MWTsKPiA+Cj4gPiAtLQo+ ID4gMi41MC4xCj4gPgo+ID4KPgo+Cj4gLS0KPiBUaGFua3MsCj4KPiBTdGV2ZQoKCgotLQpUaGFu a3MsCgpTdGV2ZQ==