Fedor Pchelkin 6cef4e6877 ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails ... commit 108a020c64434fed4b69762879d78cd24088b4c7 upstream. ksmbd_iov_pin_rsp_read() doesn't free the provided aux buffer if it fails. Seems to be the caller's responsibility to clear the buffer in error case. Found by Linux Verification Center (linuxtesting.org). Fixes: e2b76ab8b5 ("ksmbd: add support for read compound") Cc: stable@vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru> Acked-by: Namjae Jeon <linkinjeon@kernel.org> Signed-off-by: Steve French <stfrench@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-02-23 09:25:07 +01:00
..
mgmt	ksmbd: Remove unused field in ksmbd_user struct	2024-01-05 15:19:37 +01:00
Kconfig	ksmbd: remove experimental warning	2023-09-03 21:06:36 -05:00
Makefile	…
asn1.c	ksmbd: validate mech token in session setup	2024-01-25 15:35:44 -08:00
asn1.h	…
auth.c	ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()	2023-08-29 12:30:20 -05:00
auth.h	…
connection.c	ksmbd: Add missing set_freezable() for freezable kthread	2024-01-31 16:18:58 -08:00
connection.h	ksmbd: fix UAF issue in ksmbd_tcp_new_connection()	2024-01-25 15:35:44 -08:00
crypto_ctx.c	…
crypto_ctx.h	…
glob.h	…
ksmbd_netlink.h	ksmbd: fix global oob in ksmbd_nl_policy	2024-01-31 16:19:07 -08:00
ksmbd_spnego_negtokeninit.asn1	…
ksmbd_spnego_negtokentarg.asn1	…
ksmbd_work.c	ksmbd: release interim response after sending status pending response	2024-01-05 15:19:39 +01:00
ksmbd_work.h	ksmbd: fix wrong interim response on compound	2023-08-29 12:30:19 -05:00
misc.c	…
misc.h	…
ndr.c	…
ndr.h	…
nterr.h	…
ntlmssp.h	…
oplock.c	ksmbd: send lease break notification on FILE_RENAME_INFORMATION	2024-01-31 16:18:58 -08:00
oplock.h	ksmbd: lazy v2 lease break on smb2_write()	2024-01-05 15:19:40 +01:00
server.c	ksmbd: fix race condition between tree conn lookup and disconnect	2023-10-04 21:56:28 -05:00
server.h	…
smb2misc.c	ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()	2024-01-05 15:19:42 +01:00
smb2ops.c	ksmbd: set v2 lease capability	2024-01-05 15:19:39 +01:00
smb2pdu.c	ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails	2024-02-23 09:25:07 +01:00
smb2pdu.h	ksmbd: replace one-element array with flex-array member in struct smb2_ea_info	2023-08-29 12:30:20 -05:00
smb_common.c	ksmbd: validate the zero field of packet header	2024-01-25 15:35:40 -08:00
smb_common.h	ksmbd: fix out of bounds in init_smb2_rsp_hdr()	2023-07-23 10:25:11 -05:00
smbacl.c	ksmbd: free ppace array on error in parse_dacl	2024-01-20 11:51:48 +01:00
smbacl.h	ksmbd: fix possible deadlock in smb2_open	2023-12-08 08:52:15 +01:00
smbfsctl.h	…
smbstatus.h	…
transport_ipc.c	ksmbd: fix global oob in ksmbd_nl_policy	2024-01-31 16:19:07 -08:00
transport_ipc.h	…
transport_rdma.c	ksmbd: fix UAF issue in ksmbd_tcp_new_connection()	2024-01-25 15:35:44 -08:00
transport_rdma.h	…
transport_tcp.c	ksmbd: fix UAF issue in ksmbd_tcp_new_connection()	2024-01-25 15:35:44 -08:00
transport_tcp.h	…
unicode.c	ksmbd: add support for surrogate pair conversion	2024-01-05 15:19:38 +01:00
unicode.h	fs/smb: Swing unicode common code from smb->NLS	2023-08-30 08:55:51 -05:00
vfs.c	ksmbd: lazy v2 lease break on smb2_write()	2024-01-05 15:19:40 +01:00
vfs.h	ksmbd: fix possible deadlock in smb2_open	2023-12-08 08:52:15 +01:00
vfs_cache.c	ksmbd: send v2 lease break notification for directory	2024-01-05 15:19:40 +01:00
vfs_cache.h	ksmbd: lazy v2 lease break on smb2_write()	2024-01-05 15:19:40 +01:00
xattr.h	…