cifs: For SMB2 security informaion query, check for minimum sized security descriptor...
authorShirish Pargaonkar <shirishpargaonkar@gmail.com>
Mon, 4 Jun 2018 11:46:22 +0000 (06:46 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 26 Jun 2018 00:06:31 +0000 (08:06 +0800)
commitffb179cfbcf66da752524983a702e8adbaf462b7
treecc4552eb65df983ada6b2dfd11a7c85dc943a570
parent2a8737336dbd3906ec33c391a7b0f57d2f760d55
cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class

commit ee25c6dd7b05113783ce1f4fab6b30fc00d29b8d upstream.

Validate_buf () function checks for an expected minimum sized response
passed to query_info() function.
For security information, the size of a security descriptor can be
smaller (one subauthority, no ACEs) than the size of the structure
that defines FileInfoClass of FileAllInformation.

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=199725
Cc: <stable@vger.kernel.org>
Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
Reviewed-by: Noah Morrison <noah.morrison@rubrik.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/cifs/cifsacl.h
fs/cifs/smb2pdu.c