mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-29 05:44:11 +00:00
ksmbd: fix memleak in get_file_stream_info()
Fix memleak in get_file_stream_info()
Fixes: 34061d6b76
("ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests")
Cc: stable@vger.kernel.org # v5.15
Reported-by: Coverity Scan <scan-admin@coverity.com>
Acked-by: Hyunchul Lee <hyc.lee@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
This commit is contained in:
parent
1ec72153ff
commit
178ca6f85a
1 changed files with 3 additions and 1 deletions
|
@ -4498,8 +4498,10 @@ static void get_file_stream_info(struct ksmbd_work *work,
|
||||||
":%s", &stream_name[XATTR_NAME_STREAM_LEN]);
|
":%s", &stream_name[XATTR_NAME_STREAM_LEN]);
|
||||||
|
|
||||||
next = sizeof(struct smb2_file_stream_info) + streamlen * 2;
|
next = sizeof(struct smb2_file_stream_info) + streamlen * 2;
|
||||||
if (next > buf_free_len)
|
if (next > buf_free_len) {
|
||||||
|
kfree(stream_buf);
|
||||||
break;
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
file_info = (struct smb2_file_stream_info *)&rsp->Buffer[nbytes];
|
file_info = (struct smb2_file_stream_info *)&rsp->Buffer[nbytes];
|
||||||
streamlen = smbConvertToUTF16((__le16 *)file_info->StreamName,
|
streamlen = smbConvertToUTF16((__le16 *)file_info->StreamName,
|
||||||
|
|
Loading…
Reference in a new issue