summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorAleksandr Khromov <haa@amicon.ru>2026-08-24 21:23:32 +0900
committerNamjae Jeon <linkinjeon@kernel.org>2026-08-27 21:41:14 +0900
commitf3af299a336327980c17c86bea1c8bac01ca2a76 (patch)
treee6081baee3f2ccd4dec5dfe83405628bc50dd57c /scripts
parente2c8f213734927a22d7f0f19d0625c6a76e4c113 (diff)
downloadlinux-next-f3af299a336327980c17c86bea1c8bac01ca2a76.tar.gz
linux-next-f3af299a336327980c17c86bea1c8bac01ca2a76.zip
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION, that is the whole of struct smb2_fs_control_info, but never assigns FileSystemControlFlags. Those four bytes go to the client as they are found in the response buffer. The buffer is zeroed on allocation, so a standalone request leaks nothing. A compound request can leak: the offset of the next response is advanced by the length pinned for the previous one, so a reply that was written into the buffer and then dropped in favour of the short error response of smb2_set_err_rsp() stays there, and the next reply is laid over it with only the header cleared. ksmbd does not implement quota tracking, so report no control flags. Fixes: e2f34481b24d ("cifsd: add server-side procedures for SMB3") Cc: stable@vger.kernel.org Signed-off-by: Aleksandr Khromov <haa@amicon.ru> Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions