Re: [PATCH] smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

"[email protected]" <[email protected]>
Newsgroups org.kernel.vger.linux-cifs,org.kernel.vger.stable
Message-ID <[email protected]> 
On Tue, 11 Aug 2026 14:18:46 -0500, Frank Sorenson wrote:
> [PATCH] smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

Thanks, Frank - this looks good to me. The lower-bound checks on
both pointers and the source range validation cover the cases my
simpler upper-bound-only patch missed, and the Fixes: tag to
e4eb295d38b5 confirms the pre-2012 origin we suspected.

One request: the credit currently sits below the --- line, so it
would be dropped when the patch is applied. Could you add a

Reported-by: Shen Yongchao <[email protected]>

trailer to the commit message proper?

Shen Yongchao
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.