diff options
| author | Pavel Shilovsky <pshilov@microsoft.com> | 2017-03-01 01:05:19 +0100 |
|---|---|---|
| committer | Steve French <smfrench@gmail.com> | 2017-03-01 23:42:40 +0100 |
| commit | 61cfac6f267dabcf2740a7ec8a0295833b28b5f5 (patch) | |
| tree | 308037a3f6b3b5fb7a851a01a53e0c36fbaeb28f /fs/cifs/cifsproto.h | |
| parent | Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm6... (diff) | |
| download | linux-61cfac6f267dabcf2740a7ec8a0295833b28b5f5.tar.xz linux-61cfac6f267dabcf2740a7ec8a0295833b28b5f5.zip | |
CIFS: Fix possible use after free in demultiplex thread
The recent changes that added SMB3 encryption support introduced
a possible use after free in the demultiplex thread. When we
process an encrypted packed we obtain a pointer to SMB session
but do not obtain a reference. This can possibly lead to a situation
when this session was freed before we copy a decryption key from
there. Fix this by obtaining a copy of the key rather than a pointer
to the session under a spinlock.
Signed-off-by: Pavel Shilovsky <pshilov@microsoft.com>
Signed-off-by: Steve French <smfrench@gmail.com>
Diffstat (limited to 'fs/cifs/cifsproto.h')
0 files changed, 0 insertions, 0 deletions